Privacy Policy for bd33e

Introduction & Scope

This Privacy Policy (hereinafter "Policy") describes how bd33e (hereinafter "bd33e", "we", "us", or "our") collects, uses, stores, and discloses personal data when you access or use the online betting and casino platform available at https://bd33e.io and all associated subdomains and mobile applications (collectively, the "Platform").

This Policy applies to all visitors, registered players, and former players of the bd33e Platform. It covers all personal data provided directly by you, collected automatically through your use of the Platform, and received from third parties such as payment processors and identity verification providers.

By creating an account, logging in, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact [email protected] to request account closure.

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is bd33e, the operator of the Platform at https://bd33e.io. bd33e operates as an internationally licensed offshore betting platform. Questions, requests, and complaints regarding data protection should be directed to:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Privacy Request"
• Response time: Within 14 working days of receipt

bd33e does not currently designate a formal Data Protection Officer (DPO) under a specific national regulatory framework; however, our dedicated support team handles all privacy-related enquiries with the same care and diligence expected of a DPO function.

Data We Collect

3.1 Data You Provide Directly

When you register for an account, complete identity verification, contact support, or participate in promotions, bd33e may collect the following categories of personal data:

3.2 Data Collected Automatically

When you access the Platform, bd33e's systems automatically collect certain technical data necessary for the operation and security of the service:

• Device data: Device type, operating system, browser type and version, screen resolution;
• Network data: IP address, approximate geographic location derived from IP, internet service provider;
• Usage data: Pages visited, features accessed, time spent on each page, click-path data, search queries within the Platform;
• Session data: Login timestamps, session duration, logout events, failed login attempts;
• Betting data: Games played, bet amounts and outcomes, betting frequency, game provider interactions.

3.3 Data Received from Third Parties

bd33e may receive personal data about you from the following third-party sources:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency networks;
• Identity verification providers: Verification status and risk scores from KYC service partners;
• Fraud prevention services: Device fingerprint risk scores and flagged IP addresses from anti-fraud partners;
• Analytics providers: Aggregated, anonymised usage statistics from web analytics platforms.

Purpose & Legal Basis

bd33e processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which bd33e uses your data and the legal basis for each:

Data Sharing & Disclosure

5.1 Service Providers

bd33e shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These providers are contractually obligated to process your data solely on bd33e's instructions and to maintain appropriate security standards. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquirers, cryptocurrency network operators);
• Identity and age verification (KYC) service providers;
• Anti-fraud and risk management platforms;
• Game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Yggdrasil, Play'n GO) — limited to session and wagering data required for game delivery;
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Web analytics services (anonymised/aggregated data only).

5.2 Legal Disclosure

bd33e may disclose your personal data to law enforcement authorities, regulators, courts, or other government bodies where required by applicable law, court order, or regulatory requirement, or where we believe in good faith that disclosure is necessary to prevent imminent harm, investigate suspected fraud, or protect the rights and property of bd33e or its users.

5.3 Business Transfers

In the event that bd33e undergoes a merger, acquisition, corporate restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email and/or a prominent notice on the Platform, and you will have the right to close your account if you do not wish your data to be transferred.

Data Retention

bd33e retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Security Measures

bd33e takes the security of your personal data seriously. We implement a layered approach to data security that includes both technical and organisational measures:

7.1 Technical Safeguards

• TLS/SSL encryption: All data in transit between your browser or app and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher);
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted using AES-256 or equivalent standards;
• Firewalls and intrusion detection: Our servers are protected by enterprise-grade firewalls and continuously monitored intrusion detection systems;
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security;
• Penetration testing: bd33e conducts regular security assessments and penetration tests to identify and remediate vulnerabilities.

7.2 Organisational Safeguards

• Access to personal data is restricted to authorised personnel on a strict need-to-know basis;
• All staff with access to personal data are bound by confidentiality obligations;
• bd33e maintains a data breach response procedure and will notify affected players without undue delay in the event of a significant data breach that poses a risk to their rights and freedoms.

Cookies & Tracking

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across sessions and to store certain preferences or information about your visit. bd33e uses cookies and similar tracking technologies (such as pixel tags and local storage) on the Platform.

8.2 Types of Cookies We Use

8.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only certain types, or delete cookies after each session. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from logging in or completing transactions.

Analytical and functional cookies may be disabled without affecting your core ability to use the Platform, though some personalisation features may be unavailable. For detailed guidance on managing cookies, refer to your browser's help documentation.

Your Rights

As a player whose personal data is processed by bd33e, you hold a set of rights in relation to your data. bd33e is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact [email protected] with the subject "Data Privacy Request" and specify the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data bd33e holds about you, along with information about how it is processed;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected;
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data while a complaint or correction request is being resolved;
• Right to data portability: Where technically feasible, you may request a structured, machine-readable copy of the personal data you have provided to bd33e;
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

Minors & Age Verification

The bd33e Platform is strictly intended for individuals aged 21 years and above. bd33e does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step during the registration process and may be required again at the point of first withdrawal.

If bd33e becomes aware that an account has been created by or on behalf of a person under the age of 21, the account will be suspended immediately, all pending transactions cancelled, and any personal data collected from that account deleted as soon as reasonably practicable, except where retention is required to fulfil legal obligations (e.g., fraud prevention records).

If you are a parent or guardian and believe that your child has registered an account with bd33e, please contact us immediately at [email protected] with the subject "Minor Account Report". We will investigate and take appropriate action without delay.

International Data Transfers

bd33e operates as an offshore platform and your personal data may be transferred to, stored in, or processed in countries other than Bangladesh. These countries may have data protection laws that differ from those applicable in Bangladesh.

Where personal data is transferred internationally, bd33e takes appropriate steps to ensure that your data receives an adequate level of protection. These steps include entering into contractual arrangements with data recipients that impose data protection obligations equivalent to those set out in this Policy, and implementing supplementary technical safeguards such as encryption.

By using the bd33e Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to servers and service providers located outside of Bangladesh where necessary for the operation of the Platform.

Changes to This Policy

bd33e reserves the right to update or modify this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the Platform for a period of at least 14 days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will be revised whenever changes are made. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bd33e processes your personal data, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Data Privacy Request"
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform
• Response time: General enquiries within 30 minutes; formal data requests within 14 working days

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter through any applicable external dispute resolution mechanism or data protection authority relevant to your jurisdiction. bd33e will cooperate fully with any such process.