Your Privacy Matters to Us

33cd collects personal data through several channels: directly from you when you register an account or contact our support team, automatically through your use of the platform, and from third-party service providers involved in identity verification and payment processing. The categories of personal data we collect are described below.

Account Registration Data

When you create a 33cd account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postcode.
• Email address and mobile phone number.
• Username and encrypted password (we never store passwords in plain text).
• Preferred currency (BDT by default for all Bangladesh-based accounts).

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request:

• A copy of your National Identity Card (NID), passport, or other government-issued photo identification.
• Proof of residential address, such as a utility bill or bank statement issued within the last three months.
• Proof of ownership of any payment method registered on your account (e.g., screenshot of a bKash or Nagad account showing your registered mobile number).
• A live selfie or video verification in cases where identity cannot be confirmed through documents alone.

Financial Transaction Data

For each deposit or withdrawal processed on 33cd, we record:

• Transaction amount in BDT, date, time (Bangladesh Standard Time, UTC+6), and transaction reference number.
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa/Mastercard).
• Payment account identifier (e.g., registered mobile number for bKash/Nagad, last four digits for card payments — full card numbers are never stored by 33cd).
• Transaction status (pending, completed, failed, reversed) and any error codes returned by the payment provider.

Behavioural & Usage Data

When you use the 33cd platform, we automatically collect certain technical and behavioural data to operate the service, detect fraud, and improve your experience:

• IP address, device type, operating system, and browser version.
• Pages visited, time spent on each page, click patterns, and navigation paths.
• Game sessions accessed, bet history (sport, market, stake amount, odds, outcome), and slot game activity.
• Login timestamps, session duration, and logout events.
• Any error reports or crash logs generated during your session.

Communication Data

If you contact the 33cd support team via email, we retain records of that correspondence, including your name, email address, the content of your messages, and any attachments. This data is used to resolve your query and to improve our customer service processes.

33cd uses the personal data we collect for clearly defined purposes, all of which are necessary to operate a safe, fair, and legally compliant gaming platform for players across Bangladesh. We do not use your data for any purpose that is incompatible with the purposes described below.

Profiling & Automated Decision-Making

33cd uses automated systems to analyse player behaviour patterns for the purposes of fraud detection and responsible gaming monitoring. For example, unusual deposit patterns or rapid changes in betting volume may trigger an automated review flag. Where an automated process results in a decision that materially affects your account (such as a temporary suspension), you have the right to request human review of that decision by contacting [email protected].

Every instance of personal data processing carried out by 33cd rests on one of the following legal bases. We rely on the most appropriate basis for each specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 33cd — including account creation, payment processing, and game delivery. Without this processing, we cannot provide the platform service.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing carried out to pursue legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, informed consent — used specifically for optional marketing communications. You may withdraw consent at any time without affecting any other aspect of your account.

If you would like further information about the specific legal basis applied to any particular processing activity, please contact us at [email protected] and we will provide a clear written explanation within 5 business days.

33cd does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary to fulfil the relevant purpose.

Payment Service Providers

To process deposits and withdrawals, we share relevant transaction data with the mobile financial service and banking partners through which your payment is routed. These include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and international card networks (Visa, Mastercard). These providers receive only the data required to process the specific transaction and are contractually obligated to handle it securely.

Identity Verification Partners

33cd uses third-party KYC and identity verification services to validate the documents you submit during account verification. These partners process your identification data under strict data processing agreements and may not use your data for any purpose beyond the verification service they provide to 33cd.

Game Content Providers

Casino and slot game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and session token to deliver game content. These providers do not receive your full name, address, or payment details and are not permitted to use any shared data for independent marketing or profiling purposes.

Legal & Regulatory Disclosure

33cd may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, by a valid court order, or where disclosure is necessary to protect the safety of any individual, to prevent fraud, or to enforce these terms. We will notify you of any such disclosure unless we are legally prohibited from doing so.

Business Transfers

In the event that 33cd undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide at least 30 days' advance notice via the email address registered on your account before your data is transferred to any new data controller, and you will have the opportunity to close your account and request data deletion before the transfer takes effect.

The 33cd platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, and understand how players interact with the site. The following table describes the categories of cookies we use:

Managing Your Cookie Preferences

You can control optional cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please be aware that disabling functional or analytical cookies may affect the quality of your experience on the 33cd platform — for example, your layout preferences may not be saved between sessions. Strictly necessary and fraud-prevention cookies cannot be disabled without preventing the platform from functioning correctly.

Local Storage & Similar Technologies

In addition to cookies, 33cd may use browser local storage and session storage to retain small amounts of data on your device. This data serves the same functional purposes as cookies (e.g., remembering your in-progress bet slip) and is governed by the same principles described in this section.

33cd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulation. The following retention periods apply:

• Active account data: Retained for the lifetime of your account plus 5 years after account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC and identity verification documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for 7 years from the date of the transaction in accordance with financial record-keeping best practices.
• Customer support correspondence: Retained for 3 years from the date of the last interaction in the support thread.
• Analytical and behavioural data: Retained in anonymised or pseudonymised form for up to 24 months, after which it is either fully anonymised or deleted.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years following opt-out to demonstrate compliance with consent requirements.

When your personal data is no longer required, it is securely deleted or irreversibly anonymised. Data held in secure offsite backups will be purged within 90 days of the deletion date for the primary copy.

As a user of the 33cd platform, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered on your account. We will respond within 10 business days.

• Right of access: You have the right to receive a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data. For account details such as name or address, you may also update certain fields directly in your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records as described in the Data Retention section above.
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive your account data in a structured, commonly used, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting any other aspect of your account or the lawfulness of processing carried out before withdrawal.
• Right to object to automated decisions: Where a significant decision about your account has been made by an automated system, you have the right to request human review of that decision.

33cd takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

Technical Safeguards

• All data in transit is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• All data at rest — including account data, KYC documents, and transaction records — is encrypted using AES-256 encryption on secured servers.
• Passwords are stored using a one-way cryptographic hashing algorithm with per-user salting. Plain-text passwords are never stored or transmitted.
• Platform infrastructure is protected by firewalls, intrusion detection systems, and continuous vulnerability scanning.
• Access to production systems is restricted to authorised personnel using multi-factor authentication and is logged for audit purposes.

Organisational Safeguards

• Access to personal data is granted on a strict need-to-know basis. Support staff can view only the account data necessary to resolve a specific query.
• All staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.
• 33cd conducts periodic security reviews and penetration tests to identify and remediate vulnerabilities before they can be exploited.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights or interests, 33cd will notify affected players by email to their registered address as soon as reasonably practicable. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 33cd is taking to address the breach and mitigate any potential harm.

The 33cd platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. Our registration process requires all applicants to confirm their date of birth, and we use KYC document verification to confirm this during the account verification process.

If 33cd becomes aware that personal data has been collected from a person under the age of 18, the relevant account will be closed immediately, any funds deposited will be returned to the payment source, and all associated personal data will be deleted from our systems within 72 hours of the discovery.

33cd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, we will notify registered players by email to their registered address at least 14 days before the changes take effect. The updated policy will also be published on this page with a revised effective date.

Your continued use of the 33cd platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material change, you may close your account by contacting [email protected] before the change takes effect.

How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 33cd handles your personal data, please contact the 33cd support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 48 hours for initial acknowledgement; full response within 10 business days
• Availability: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

For formal privacy rights requests (access, erasure, portability, rectification), please include the subject line "Privacy Rights Request" in your email along with your registered account email address and a brief description of your request. This will help us route your request to the correct team and respond as quickly as possible.