33bg Privacy Policy — Your Data, Your Rights

33bg is an international online gaming and sports betting platform accessible at https://33bg.io. We provide cricket betting, live casino games, slot games, and a range of other gaming products to players in Bangladesh and select international markets. For the purposes of this Privacy Policy, 33bg acts as the data controller in respect of the personal data you provide when registering or using the platform.

Our platform is operated entirely in English and is designed specifically to serve the Bangladeshi market, with support for local payment methods including bKash, Nagad, Rocket, and Upay. All data processing activities described in this policy are conducted in accordance with internationally recognised data protection standards.

If you have any questions about how 33bg handles your personal data, you may contact our Data Support team at any time. Contact details are provided in Section 14 of this policy.

33bg collects personal data in the following categories. We collect only the data that is necessary for the specific purposes described in Section 4 of this policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

33bg collects your personal data through the following channels:

• Direct submission: Data you actively provide when creating an account, completing registration forms, submitting KYC documents, making deposits or withdrawals, or contacting our support team.
• Automated collection: Technical and behavioural data collected automatically when you visit or use the platform, including via cookies, session tokens, server logs, and analytics tools. See Section 7 for full details on cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks when you initiate a deposit or withdrawal.
• Identity verification partners: Data returned by third-party KYC verification services when you submit identity documents for account verification.
• Fraud and risk detection services: Data received from fraud prevention and risk screening partners to identify potentially fraudulent or suspicious account activity.
• Game providers: Session and outcome data from licensed third-party game providers such as Evolution Gaming, Pragmatic Play, Ezugi, and Spribe in connection with games you play on the platform.

33bg uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity, and manage your ongoing relationship with the 33bg platform.
• Service delivery: To provide access to cricket betting, live casino, slot games, and all other platform features you use.
• Payment processing: To process deposits, withdrawals, and refunds via your registered payment method, and to maintain accurate financial records.
• KYC and age verification: To confirm that you are at least 21 years of age and that the identity details you have provided are accurate, in accordance with our responsible gaming commitments.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, and provide assistance via live chat and email.
• Legal and regulatory compliance: To fulfil our obligations under applicable international online gaming standards and to respond to lawful requests from authorities.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, and to implement deposit limits, self-exclusion, and other responsible gaming tools at your request or where warranted by observed behaviour.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, reliability, and features of the 33bg platform.
• Promotional communications: To inform you of relevant bonuses, promotions, and platform updates — only where you have provided consent or where we have a legitimate interest in doing so, and always with an accessible opt-out mechanism.

33bg processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — for example, processing deposits, settling bets, and managing your account.
• Legitimate interests: Processing necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights — for example, fraud prevention, platform security, and product analytics.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations and responses to lawful authority requests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing communications about promotions. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may request information about any specific legitimate interests assessment by contacting [email protected].

33bg does not sell, rent, or trade your personal data to third parties for their marketing purposes. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive only the transaction data necessary to process your deposit or withdrawal.
• Identity verification providers: Third-party KYC and age verification services receive the identity documents you submit, solely for the purpose of confirming your identity and age.
• Fraud and risk prevention services: Data including IP address, device identifiers, and behavioural signals may be shared with fraud screening partners to protect the platform and its players.
• Game providers: Licensed game providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming receive session data necessary to deliver the games you play. These providers operate under their own data protection policies and are bound by contractual data processing agreements with 33bg.
• Legal and regulatory authorities: 33bg may disclose your data where required to do so by a court order, regulatory directive, or other lawful authority request. We will notify you of any such disclosure unless legally prohibited from doing so.
• Professional advisers: Our legal advisers, auditors, and insurers may access data where strictly necessary for the provision of professional services, subject to confidentiality obligations.

The 33bg platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device when you visit the platform. Cookies do not contain your name, password, or payment details.

Essential and security cookies are required for the platform to function and cannot be disabled without impairing core functionality. Functional and analytics cookies may be declined via your browser settings. Most modern browsers allow you to block or delete cookies via their privacy settings — please consult your browser's help documentation for guidance.

33bg does not use advertising or cross-site tracking cookies. We do not share cookie data with advertising networks or social media platforms.

33bg retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account, and for a minimum of 5 years following account closure, to comply with anti-money-laundering and record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for the duration of your account and for a minimum of 5 years following account closure.
• Communications data (support transcripts, emails): Retained for 3 years from the date of the communication, unless the communication forms part of an ongoing dispute or legal matter.
• Technical and behavioural data (logs, session data): Retained for up to 24 months, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, as evidence of the consent record.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised aggregated data may be retained indefinitely for platform analytics and improvement purposes.

33bg implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security practices include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 33bg platform is encrypted using industry-standard SSL/TLS protocols.
• Password hashing: Player passwords are never stored in plain text. All passwords are processed through a strong cryptographic hashing algorithm with unique salts per account.
• Access controls: Access to personal data within 33bg's systems is restricted on a strict need-to-know basis. Employee access is governed by role-based permissions and is regularly reviewed.
• Infrastructure security: 33bg's platform infrastructure is hosted in secure data centres with physical access controls, redundant systems, and regular vulnerability assessments.
• Intrusion detection: Automated monitoring systems are in place to detect and alert on unusual access patterns, potential intrusion attempts, and data anomalies in real time.
• Incident response: In the event of a confirmed data breach that poses a risk to your rights, 33bg will notify affected players without undue delay and will take all reasonable steps to mitigate harm.

As a player on the 33bg platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered username. We will respond within 30 days.

• Right of Access: You may request a copy of the personal data 33bg holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: In certain circumstances, you may request that 33bg delete your personal data. This right is subject to our legal retention obligations — for example, we cannot delete financial records within the mandatory retention period.
• Right to Restriction: You may request that 33bg restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where 33bg relies on legitimate interests as the legal basis. We will assess whether our interests are overridden by your rights in each specific case.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The 33bg platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during the registration process, and 33bg reserves the right to request additional proof of age at any point during an account's lifetime.

If 33bg becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and void any transactions or winnings associated with the account.

If you believe that a minor has created an account on the 33bg platform, please contact our support team immediately at [email protected] so that we can investigate and take prompt action.

The 33bg platform may from time to time reference or link to third-party content such as game provider information pages or payment partner help resources. 33bg does not control the content, privacy practices, or data collection activities of any third-party website or platform.

This Privacy Policy applies solely to data collected and processed by 33bg via the https://33bg.io platform. If you navigate to a third-party site from a link on our platform, we encourage you to review that site's own privacy policy before providing any personal information. 33bg accepts no responsibility for the privacy practices of third-party sites.

33bg reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. The effective date shown at the top of this page reflects the date of the most recent revision.

When we make material changes to this policy — meaning changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email to their registered address or via a prominent in-platform notice, at least 7 days before the changes take effect.

Changes that are minor or administrative in nature (such as correcting a typographical error or clarifying existing wording without changing meaning) may be made without advance notice. Your continued use of the 33bg platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you disagree with any updated version of this Privacy Policy, you should cease using the platform and may request account closure in accordance with Section 12 of the Terms & Conditions.

If you have questions, concerns, or requests relating to this Privacy Policy or the personal data 33bg holds about you, please reach out to our support team through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the 33bg platform
• Support Hours: 24/7 · Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered username and clearly describe the right you wish to exercise. We aim to acknowledge all data-related requests within 2 business days and to provide a full response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension.