bd33g Privacy Policy — Your Data, Your Rights, Our Commitment

bd33g is an online casino and sports betting platform serving players in Bangladesh. We are committed to processing all personal data responsibly, transparently, and in accordance with applicable data protection principles under our international offshore operating licence.

This Privacy Policy applies to all personal data processed in connection with your use of the bd33g website (bd33g.io), the bd33g Login portal, the bd33g Casino section, all sports betting markets including BPL cricket, IPL, T20 World Cup, and tennis, and all customer support channels including email correspondence with [email protected].

This policy should be read alongside the bd33g Terms & Conditions and the bd33g Responsible Gaming Policy, both of which are available on this site. Where any conflict exists between this policy and those documents in respect of the handling of personal data, this Privacy Policy shall prevail.

For the purposes of this Privacy Policy, bd33g acts as the data controller in respect of all personal data collected from players who register and use the platform. As data controller, bd33g determines the purposes and means by which your personal data is processed.

Where bd33g engages third-party service providers to process personal data on its behalf — such as payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification services, and game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — those parties act as data processors operating under bd33g's instructions and are bound by data processing agreements that require them to maintain appropriate security standards and process data only as instructed.

All enquiries regarding data processing by bd33g should be directed to: [email protected]

bd33g collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of personal data we may hold about you:

bd33g does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. If you voluntarily disclose such information in support correspondence, it will be used solely to resolve your enquiry and will not be retained beyond the duration necessary for that purpose.

bd33g collects personal data through the following channels and mechanisms:

• Direct Submission: You provide data directly to bd33g when you complete the registration form, submit KYC documents, initiate deposits or withdrawals, contact support via email, or complete any other form on the platform.
• Automated Technical Collection: When you visit bd33g.io, our servers and analytics systems automatically collect Technical Data and Usage Data including your IP address, device fingerprint, browser information, and navigation behaviour. This collection occurs on every visit, whether or not you are logged in.
• Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider confirms transaction details to bd33g. bd33g receives only the minimum data necessary to reconcile the transaction — for example, the last four digits of a card, or confirmation that a bKash transfer has been completed from a wallet registered in your name.
• Identity Verification Partners: bd33g may use third-party KYC service providers to verify the authenticity of identity documents you submit. These providers process your document data under strict data processing agreements with bd33g.
• Cookies and Similar Technologies: bd33g uses first-party cookies and browser local storage to maintain your login session, store your preferences, and collect aggregate usage analytics. See Section 7 for full details.
• Game Provider Data Feeds: Third-party game providers such as Pragmatic Play, Evolution Gaming, and Spribe provide bd33g with records of all game rounds, bet amounts, and outcomes associated with your account. This data is used for account statement generation, dispute resolution, and responsible gaming monitoring.

bd33g processes your personal data for the following purposes, each of which rests on a recognised legal basis:

• Account Registration and Service Delivery: To create and manage your bd33g account, process deposits and withdrawals in BDT, deliver access to casino games and sports betting markets, and provide customer support. Legal basis: performance of a contract between you and bd33g.
• Identity Verification (KYC): To verify your identity, confirm your age (21+ only), confirm the ownership of payment methods, and comply with anti-money laundering and fraud prevention obligations. Legal basis: compliance with legal obligations and legitimate interests (fraud prevention).
• Anti-Money Laundering (AML) Monitoring: To monitor transactions for patterns consistent with money laundering, terrorist financing, or other financial crimes, and to report suspicious activity to relevant authorities as required. Legal basis: compliance with legal obligations.
• Responsible Gaming Monitoring: To identify indicators of problem gambling behaviour, apply responsible gaming tools on request, and proactively intervene where necessary to protect vulnerable players. Legal basis: legitimate interests (player protection) and legal obligations under our licence conditions.
• Platform Security: To detect, prevent, and investigate fraud, unauthorised account access, bonus abuse, and other prohibited conduct described in the bd33g Terms & Conditions. Legal basis: legitimate interests (platform and player security).
• Analytics and Platform Improvement: To analyse aggregate usage patterns, identify technical issues, improve game and feature offerings, and optimise the player experience on bd33g.io. Legal basis: legitimate interests (business improvement). All analytics data used for this purpose is aggregated and anonymised where possible.
• Marketing Communications (Optional): To send you promotional emails, SMS messages, and on-platform notifications about bd33g bonuses, new game releases, seasonal offers (e.g., Eid promotions, Pohela Boishakh specials), and BPL cricket betting markets. Legal basis: your explicit consent, which you may withdraw at any time.
• Legal and Regulatory Compliance: To respond to lawful requests from competent authorities, comply with our offshore licence conditions, and defend or assert legal claims. Legal basis: compliance with legal obligations and legitimate interests (legal defence).

bd33g does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Personal data is shared with external parties only in the following circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their acquiring banks receive the minimum personal and financial data required to authorise and complete your deposit or withdrawal transactions.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive your anonymised player ID and bet records in order to operate game sessions, verify outcomes, and provide game round histories for dispute resolution.
• KYC and Identity Verification Services: Third-party identity verification providers may process your submitted documents to confirm their authenticity. These providers are contractually prohibited from retaining or using your documents for any purpose other than the specific verification task.
• IT Infrastructure and Hosting Providers: bd33g's platform is hosted on third-party server infrastructure. Hosting providers are bound by data processing agreements and may not access player data for any independent purpose.
• Legal and Regulatory Authorities: bd33g will disclose personal data to competent law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid court order, or the conditions of our international offshore operating licence. In all such cases, bd33g will disclose only the minimum data necessary to satisfy the lawful request.
• Professional Advisers: bd33g's legal counsel, auditors, and financial advisers may access personal data on a confidential, need-to-know basis in the course of providing professional services to the platform.

All third parties with whom bd33g shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with bd33g's documented instructions.

bd33g uses cookies — small text files stored on your browser or device — and similar technologies such as browser local storage and session tokens to operate the platform effectively. The following cookie categories are in use on bd33g.io:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session after you authenticate via the bd33g Login page, remember your account preferences, and enable secure page navigation. These cookies cannot be disabled without preventing you from using core platform features.
• Performance and Analytics Cookies: These first-party cookies collect aggregate, anonymised data about how players navigate bd33g.io — for example, which pages are most visited, how long sessions last, and where players encounter errors. This data is used exclusively to improve the platform and is never used to identify individual players.
• Functional Cookies: These cookies remember your preferences such as your preferred language display, default deposit method, and responsible gaming limit settings, so you do not need to re-enter them on each visit.

bd33g does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or cross-site tracking technologies of any kind. Your browsing activity on bd33g.io is not shared with advertising networks.

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. For guidance on managing cookies in your specific browser, refer to the help documentation for Chrome, Firefox, Safari, or Edge as appropriate.

bd33g retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account relationship with bd33g, plus a minimum of five (5) years following account closure. This retention period reflects our anti-money laundering and licence compliance obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in BDT, in compliance with financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Correspondence: Retained for three (3) years from the date of each interaction, to enable us to refer back to previous communications in the event of related future enquiries or disputes.
• Technical and Usage Data (Logs): Server access logs and session logs are retained for a maximum of twelve (12) months, after which they are deleted or fully anonymised.
• Marketing Consent Records: Records of your marketing opt-in or opt-out preference are retained for the lifetime of your account plus three (3) years following closure, to demonstrate compliance with consent requirements.

When personal data is no longer required for any purpose, bd33g will securely delete or anonymise it in a manner that prevents reconstruction of the original data. If you submit a data erasure request, bd33g will honour it subject to any legal retention obligations that require us to maintain specific records beyond your request.

bd33g implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data exchanged between your browser or device and bd33g.io is encrypted using TLS 1.2 or higher (256-bit SSL). You will see the padlock indicator in your browser address bar confirming this encryption is active.
• Encryption at Rest: Sensitive personal data fields — including password hashes, identity document references, and financial identifiers — are encrypted at rest within bd33g's database infrastructure.
• Access Controls: Access to personal data within bd33g's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of system access required to perform their specific job functions. All staff access is logged and reviewed.
• Password Security: Player account passwords are stored using a one-way cryptographic hash function with a unique per-account salt. bd33g staff cannot view or recover your password in plain text. If you forget your password, a reset process is initiated via your registered email address.
• Two-Factor Authentication (2FA): bd33g supports optional two-factor authentication for player accounts via SMS OTP. We strongly recommend all players activate 2FA, particularly those in Dhaka, Chittagong, Sylhet, and other high-traffic regions where account security risks may be elevated.
• Security Audits: bd33g conducts periodic internal and third-party security reviews of its platform and data infrastructure to identify and remediate vulnerabilities proactively.

Notwithstanding these measures, no security system is entirely infallible. bd33g cannot guarantee the absolute security of data transmitted over the internet. In the event of a data breach that poses a risk to your rights and freedoms, bd33g will notify affected players without undue delay and will take all reasonable steps to contain and investigate the incident.

As a player on the bd33g platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and provide your registered account username.

• Right of Access: You may request a full copy of all personal data bd33g holds about you. We will provide this in a structured, readable format within a reasonable timeframe (typically within 30 days of receipt of your verified request).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account details such as email address and phone number can be updated directly within your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that bd33g delete your personal data. We will comply with such requests except where retention is required by our legal, regulatory, or licence obligations (see Section 8). Note that a data erasure request will typically require Account closure.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing — you may request that bd33g restricts how it uses your data while the matter is under review.
• Right to Data Portability: You may request that bd33g provide your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service provider.
• Right to Object to Processing: You may object to the processing of your personal data where that processing is based on bd33g's legitimate interests. bd33g will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

If bd33g discovers or is notified that an Account has been registered by an individual under the age of 21, the Account will be immediately suspended pending investigation. All funds within the Account will be frozen. If the age violation is confirmed, the Account will be permanently closed, any funds will be handled in accordance with our Terms & Conditions and applicable law, and all personal data associated with the Account will be deleted unless retention is required for fraud reporting or legal purposes.

If you believe that a minor has registered on the bd33g platform — whether a family member or any other individual known to you — please contact us immediately at [email protected] so that we can take prompt action. bd33g cooperates fully with parental and guardian requests regarding the removal of minor player data.

bd33g recommends that parents and guardians in Bangladesh make use of parental control software to prevent minors from accessing online gambling platforms. Resources on responsible digital parenting are available through independent child safety organisations.

bd33g operates under an international offshore licence, and some of the third-party service providers we engage — including certain game software providers, KYC verification partners, and IT infrastructure suppliers — are based in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than Bangladesh.

Where such international transfers occur, bd33g takes appropriate steps to ensure that your personal data remains protected to a standard equivalent to that which would apply if it were processed within Bangladesh. These steps include:

• Executing data processing agreements with all third-party processors that include binding obligations regarding data security, confidentiality, and processing restrictions.
• Transferring data only to processors located in jurisdictions with adequate data protection frameworks, or requiring processors to implement supplementary safeguards where adequate protection cannot otherwise be confirmed.
• Restricting the scope of data transferred internationally to the minimum necessary for the specific processing purpose.

By using the bd33g platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to and processing of your data in jurisdictions outside Bangladesh as described in this section.

bd33g reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The effective date at the top of this document will be updated each time a material revision is made.

Where amendments are material — for example, changes to the categories of data we collect, the third parties with whom we share data, or your rights as a data subject — bd33g will make reasonable efforts to notify registered players via the email address on file or via a prominent on-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how bd33g protects your data. Your continued use of the platform after any revised policy has been published constitutes acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and may request Account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd33g holds about you, please contact our support team using the details below. All privacy-related correspondence must be in English.

Please include your registered Account username and a clear description of your enquiry in all correspondence. bd33g is committed to resolving all privacy-related concerns promptly, transparently, and in good faith.