Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by 33bd4 through our website, mobile applications, customer support channels, and any other services we provide (collectively, the "Platform"). By using the 33bd4 Platform, you consent to the data practices described in this policy.

33bd4 operates as an online betting platform serving users in Bangladesh, offering sports betting, live casino games, slot machines, and related gambling entertainment. We take data protection seriously and comply with applicable Bangladesh data protection laws and international best practices for information security.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. If you do not agree with any part of this Privacy Policy, you should immediately cease using the Platform and contact us to request account closure and data deletion.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account with 33bd4, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents such as Bangladesh national ID card, passport, or driver's license (required for age and identity verification).
• Contact Information: Email address, mobile phone number, residential address, and preferred communication method.
• Account Credentials: Username, password (stored in encrypted form), and security questions for account recovery purposes.
• Financial Information: Payment method details including bKash, Nagad, or Rocket mobile wallet account numbers, bank account information for withdrawals, and transaction history records.
• Verification Documents: Proof of address documents (utility bills, bank statements), proof of payment method ownership (mobile wallet screenshots), and any additional documentation requested during enhanced due diligence procedures.

2.2 Information We Collect Automatically

When you access the 33bd4 Platform, we automatically collect certain technical information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system version, browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: IP address, login timestamps, pages viewed, features used, games played, betting patterns, time spent on the Platform, clickstream data, and referral sources.
• Location Data: General geographic location derived from your IP address to ensure compliance with geographic restrictions and to detect unauthorized access from prohibited jurisdictions.
• Communication Records: Records of your interactions with our customer support team, including live chat transcripts, email correspondence, and phone call recordings (where permitted by law and with your consent).

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including payment processors (bKash, Nagad, Rocket, banks), identity verification services, fraud prevention agencies, credit reference agencies, and publicly available databases, to verify your identity, prevent fraud, and comply with anti-money laundering regulations.

3. How We Use Your Information

33bd4 uses your personal information for the following purposes:

• Account Management: Creating and maintaining your user account, authenticating your identity at login, processing account updates, and managing account closure requests.
• Transaction Processing: Processing deposits and withdrawals, verifying payment method ownership, detecting and preventing payment fraud, and maintaining accurate financial records for regulatory compliance.
• Service Delivery: Providing access to betting markets, casino games, and slot machines; processing bets and wagers; calculating and paying out winnings; and delivering customer support services.
• Verification and Compliance: Verifying your age (21+ requirement), confirming your identity to prevent account fraud, conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks, and complying with legal obligations under Bangladesh law.
• Security and Fraud Prevention: Monitoring for suspicious account activity, detecting multi-accounting violations, preventing bonus abuse, identifying collusion or cheating attempts, and protecting the Platform from cyber attacks.
• Marketing and Communications: Sending promotional offers, bonus notifications, game updates, and newsletters (only with your explicit consent, which can be withdrawn at any time by adjusting your communication preferences or unsubscribing).
• Platform Improvement: Analyzing user behavior to improve Platform functionality, personalizing game recommendations, optimizing user interface design, and developing new features based on user feedback.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behavior, implementing deposit limits and self-exclusion tools, and providing responsible gaming resources when needed.
• Legal Obligations: Responding to legal requests from law enforcement or regulatory authorities, resolving disputes, enforcing our Terms & Conditions, and protecting our legal rights in case of litigation.

4. Legal Basis for Processing Your Data

We process your personal information under the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (the Terms & Conditions you accepted when creating your account), including providing betting services, processing transactions, and managing your account.
• Legal Compliance: Processing is required to comply with legal obligations imposed by Bangladesh law, anti-money laundering regulations, tax reporting requirements, and licensing conditions.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security protection, Platform improvement, and direct marketing (where not overridden by your fundamental rights and freedoms).
• Consent: For certain processing activities such as marketing communications, cookie usage beyond strictly necessary cookies, and sharing data with third-party advertising partners, we rely on your explicit, freely given, informed consent which you can withdraw at any time.

5. How We Share Your Information

33bd4 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

• Payment Processors: bKash, Nagad, Rocket, banks, and other payment service providers to process deposits, withdrawals, and verify payment method ownership.
• Identity Verification Services: Third-party KYC/AML service providers who verify your identity documents, check sanctions lists, and conduct fraud screening on our behalf.
• Game Providers: Software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, and other game studios whose platforms are integrated into 33bd4 to deliver casino games and slots.
• Cloud Service Providers: Data hosting and storage providers that maintain secure servers for our Platform infrastructure, databases, and backup systems.
• Customer Support Tools: Third-party customer support platforms (live chat software, helpdesk systems, email service providers) that help us respond to your inquiries.
• Analytics and Marketing Services: Analytics platforms (Google Analytics, Mixpanel) and advertising networks that help us understand user behavior and deliver targeted advertising (subject to your cookie preferences).
• Legal and Regulatory Authorities: Law enforcement agencies, courts, tax authorities, financial crime prevention agencies, and regulatory bodies when legally required or to protect our rights and interests.
• Professional Advisors: Lawyers, auditors, accountants, and consultants who provide professional services to 33bd4 under strict confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, sale of assets, or corporate restructuring, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

All third parties with whom we share your data are contractually required to maintain appropriate security measures, process data only for specified purposes, and comply with applicable data protection laws. We conduct due diligence on all service providers to ensure they meet our security and privacy standards.

6. Data Security Measures

33bd4 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected using SSL/TLS encryption (256-bit encryption standard). Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized 33bd4 employees and contractors who require access to perform their job functions. All personnel are bound by confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, environmental monitoring, redundant power supplies, and 24/7 security surveillance.
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular security vulnerability assessments protect the Platform from cyber attacks.
• Authentication: Multi-factor authentication is available for user accounts, and all administrative access to systems requires strong authentication credentials.
• Regular Audits: We conduct periodic security audits, penetration testing, and code reviews to identify and remediate potential vulnerabilities.
• Incident Response: We maintain an incident response plan to detect, contain, and respond to data breaches promptly, including notification procedures as required by law.

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security of your data, and you acknowledge that any transmission of information is at your own risk. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect unauthorized access.

7. Data Retention

33bd4 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: We retain all account information, transaction records, and usage data for the duration of your active account relationship with 33bd4.
• Closed Accounts: After account closure, we retain your data for a minimum of 5 years to comply with financial record-keeping requirements, anti-money laundering regulations, and tax reporting obligations under Bangladesh law.
• Identity Verification Documents: Copies of identification documents are retained for 7 years after account closure or the last transaction, whichever is later, to comply with KYC/AML legal obligations.
• Transaction Records: Financial transaction histories, including deposits, withdrawals, bets placed, and winnings paid, are retained for 7 years for accounting, tax, and dispute resolution purposes.
• Marketing Preferences: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you in the future.
• Legal Claims: If information is relevant to ongoing legal proceedings, disputes, or investigations, we retain the data until the matter is fully resolved and any applicable statute of limitations has expired.

After the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

8. Your Privacy Rights

You have the following rights regarding your personal information, which you can exercise by contacting us at [email protected]:

• Right of Access: You may request a copy of the personal information we hold about you, including details of processing activities and third-party recipients. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to Rectification: If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. This right is subject to legal retention obligations and legitimate business interests.
• Right to Restrict Processing: You may request that we temporarily restrict processing of your data while we verify the accuracy of your information, assess your objection to processing, or during legal proceedings.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you may lodge a complaint with the relevant data protection authority in Bangladesh or your jurisdiction of residence.

To exercise any of these rights, please submit a written request to [email protected] with sufficient information to verify your identity. We will respond to your request within 30 days and provide reasons if we are unable to fulfill your request due to legal obligations or legitimate interests.

9. Cookies and Tracking Technologies

33bd4 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform functionality, including authentication, session management, security, and load balancing. These cookies cannot be disabled without severely impairing Platform usability.
• Performance Cookies: Collect anonymous usage statistics to help us understand how users interact with the Platform, identify popular features, and diagnose technical issues.
• Functional Cookies: Remember your preferences (language, currency display, theme) and provide enhanced features such as live chat support.
• Targeting/Advertising Cookies: Track your browsing behavior across websites to deliver personalized advertisements and measure advertising effectiveness. These cookies are only used with your explicit consent.

You can manage cookie preferences through your browser settings or our cookie consent tool displayed on your first visit. Disabling certain cookies may limit Platform functionality. For more details, please refer to our Cookie Policy available in your account settings.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside of Bangladesh, including servers located in jurisdictions with different data protection standards. When we transfer your data internationally, we implement appropriate safeguards such as standard contractual clauses, adequacy decisions, or other legally approved transfer mechanisms to ensure your data receives equivalent protection.

By using the 33bd4 Platform, you consent to the transfer of your information to countries outside Bangladesh for the purposes described in this Privacy Policy. We ensure that all international data transfers comply with applicable data protection laws and that recipient entities maintain adequate security measures.

11. Children's Privacy

The 33bd4 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete the account and all associated personal information without notice.

Parents and guardians are encouraged to monitor their children's internet usage and use parental control software to prevent minors from accessing online gambling websites. If you believe that a minor has created an account or provided personal information to 33bd4, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

33bd4 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated policy on the Platform with a revised "Last Updated" date and, where appropriate, by sending an email notification to your registered email address.

Your continued use of the 33bd4 Platform after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you do not agree with any changes, you must cease using the Platform and contact us to close your account.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection team:

Email: [email protected]

Subject Line: Privacy Inquiry / Data Protection Request

We are committed to addressing your privacy concerns promptly and transparently. When contacting us, please provide sufficient detail to allow us to identify your account and respond effectively. For data subject access requests or other formal privacy rights exercises, please include your full name, registered email address, and account username to expedite verification.

We will respond to all legitimate privacy inquiries within 30 days. For complex requests requiring additional time, we will notify you of the extension and provide an estimated response timeframe.