33bt Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how 33bt ("the Platform", "we", "us", "our") collects, processes, uses, stores, and protects personal data relating to individuals ("you", "the User", "the Player") who access, register on, or otherwise interact with the 33bt website at https://33bt.io and any of its associated subdomains, mobile interfaces, or related digital services (collectively, "the Platform").

This Policy applies to all personal data processed by 33bt in connection with the provision of its online betting, casino, slots, fishing games, and customer support services targeting the Bangladesh market. It covers data collected through direct registration and account activity, payment processing, identity verification, customer support interactions, and the Platform's use of cookies and similar tracking technologies.

By registering an account on the 33bt Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you must not register an account or continue to use the Platform.

For the purposes of applicable data protection law, 33bt acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, 33bt determines the purposes and means by which your personal data is processed.

33bt operates as an online entertainment platform serving players across Bangladesh, including users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of the country. All data processing activities are conducted in accordance with the principles of purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

All enquiries relating to data protection, privacy rights, or this Policy should be directed to the 33bt support team via the contact channels set out in Section 16 of this Policy.

33bt collects and processes the following categories of personal data in connection with your use of the Platform:

33bt does not collect sensitive personal data categories (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless strictly required for identity verification purposes in connection with KYC obligations, and only to the minimum extent necessary for that purpose.

33bt collects personal data through the following channels and mechanisms:

• Direct registration: When you create an account on the Platform, you provide your name, date of birth, and Bangladeshi mobile number directly to 33bt through the registration form.
• Account activity: Data is generated automatically as you use the Platform — including bet placements, game sessions, deposit and withdrawal transactions, and bonus claims.
• KYC submission: When you submit identity documents as part of the verification process, those documents and the data contained within them are collected and stored by 33bt.
• Payment transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard, transaction data is received from your payment provider and stored in your account record.
• Customer support: Data shared during live chat, email correspondence, or any other support interaction is collected and retained as part of your account history.
• Cookies and tracking technologies: Technical data such as IP addresses, device identifiers, and session data are collected automatically when you access the Platform. See Section 6 for full details on cookie usage.
• Third-party verification partners: Where 33bt engages third-party KYC or identity verification service providers to assist with the verification process, those providers may return identity data to 33bt following a verification check.

33bt processes your personal data for specific, legitimate purposes. The following table sets out the primary purposes for which your data is processed and the legal basis on which each processing activity rests:

• Performance of contract: Processing your account registration, managing your wallet, processing deposits and withdrawals, settling bets, and delivering the gaming services you have contracted to receive. Without this processing, 33bt cannot provide the Platform services.
• Legal obligation: Carrying out KYC identity verification, anti-money laundering (AML) screening, and fraud prevention monitoring as required by applicable regulatory obligations. Retaining transaction records and account history for the mandatory retention period under applicable law.
• Legitimate interests: Maintaining the security and integrity of the Platform and its user accounts; detecting, investigating, and preventing fraudulent or abusive conduct; improving the Platform's features and performance through aggregated usage analytics; conducting responsible gaming monitoring to identify patterns of play that may indicate gambling-related harm.
• Consent: Sending promotional communications about 33bt bonuses, offers, seasonal promotions (e.g., Eid special offers, BPL season promotions, Pohela Boishakh bonuses), and new game releases, where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

The 33bt Platform uses cookies and similar tracking technologies to support the functioning of the Platform, to maintain your logged-in session, and to collect analytical data that helps us understand how users interact with our services. The following categories of cookies are used:

• Essential cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, store your wallet state between pages, and ensure the security of your account during your visit. Essential cookies cannot be disabled without breaking core Platform functionality.
• Analytical cookies: These cookies collect anonymised or pseudonymised data about how visitors navigate the Platform — which pages are visited most frequently, how long sessions last, and where users exit the Platform. This data is used solely to improve Platform performance and user experience.
• Functional cookies: These cookies remember your preferences, such as language settings and notification preferences, so that you do not need to re-enter them on each visit.
• Security cookies: These cookies support 33bt's fraud detection and account security systems by recording device fingerprint data and session identifiers to identify unusual account activity.

You may manage or disable non-essential cookies through your browser settings at any time. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling certain cookies may affect the performance or functionality of some Platform features.

33bt does not use cookies to serve third-party advertising or to track your activity across websites other than the 33bt Platform itself.

33bt does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Your personal data may be shared with the following categories of third parties only to the extent strictly necessary to deliver the Platform's services or to meet legal obligations:

• Payment processing partners: Operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These partners are bound by their own privacy obligations and data processing agreements.
• KYC and identity verification providers: Where 33bt engages a third-party verification service to assist with KYC obligations, identity document data is transmitted to that provider under a data processing agreement that restricts its use to the verification purpose only.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games on the Platform. The extent of data shared is limited to what is technically required to operate the game session.
• Customer support systems: Third-party live chat and support ticketing platforms used by 33bt may process communication data on our behalf under data processing agreements.
• Law enforcement and regulatory authorities: 33bt will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction, including in connection with AML investigations or fraud reporting.
• Professional advisers: Legal, financial, and security advisers retained by 33bt may access personal data to the minimum extent required to provide their professional services, subject to confidentiality obligations.

In the course of providing the Platform's services, personal data collected from users in Bangladesh may be transferred to and processed on servers or systems located outside of Bangladesh. This may occur in connection with cloud hosting services, game software providers headquartered in other jurisdictions, or KYC verification partners operating internationally.

Where such transfers occur, 33bt takes appropriate steps to ensure that the transfer is lawful and that adequate protections are in place for your personal data, including contractual data protection clauses and data processing agreements that require recipients to maintain a level of protection equivalent to that applied by 33bt.

By using the 33bt Platform and providing your personal data, you acknowledge and consent to the transfer of your data in the circumstances described above. If you have concerns about the destination or handling of your data in connection with international transfers, you may contact the 33bt support team for further information.

33bt retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. The following retention principles apply:

• Active account data: Personal data associated with an active 33bt account is retained for the duration of the account's activity on the Platform.
• Closed account data: Following the closure of a 33bt account, personal data (including identity documents, transaction records, and account history) is retained for a minimum period of five (5) years from the date of account closure. This retention period reflects obligations under applicable AML and financial record-keeping standards.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following the completion of the verification process or the closure of the associated account, whichever is later.
• Support communications: Live chat transcripts and support ticket records are retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records: Records of marketing consent (and any subsequent withdrawal of consent) are retained for as long as the account remains registered on the Platform and for a reasonable period thereafter.
• Technical and analytical data: Anonymised or pseudonymised analytical data may be retained indefinitely for the purposes of Platform performance analysis, as it cannot be used to identify individual users.

At the end of the applicable retention period, personal data will be securely deleted or anonymised in accordance with 33bt's internal data management procedures.

33bt implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied across all pages and data transmission channels on the Platform, ensuring that data in transit between your device and 33bt's servers is encrypted at all times.
• Encrypted data storage for sensitive data fields including identity document data, payment method references, and account credentials.
• Role-based access controls that restrict internal access to personal data to authorised 33bt personnel whose role requires access to that data.
• Two-step mobile OTP verification available to all account holders as an additional layer of account access security.
• Automated fraud detection systems that monitor account activity in real time for patterns indicative of unauthorised access, unusual transaction behaviour, or abuse.
• Regular security assessments of the Platform's infrastructure, application layer, and data storage systems.

While 33bt maintains robust security practices, no digital platform can guarantee absolute immunity from security threats. In the event of a data breach that is likely to result in a risk to your rights and interests, 33bt will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

As a data subject, you hold the following rights in respect of the personal data that 33bt holds about you. These rights may be exercised by contacting the 33bt support team through the channels described in Section 16:

• Right of access: You have the right to request confirmation of whether 33bt holds personal data about you and, if so, to receive a copy of that data along with information about how it is being used.
• Right to rectification: If personal data held by 33bt is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your account dashboard.
• Right to erasure: In certain circumstances, you have the right to request that 33bt delete personal data it holds about you. This right is subject to 33bt's legal obligations to retain certain data for AML, fraud prevention, and regulatory compliance purposes. Where deletion is not possible due to these obligations, 33bt will restrict processing of the data instead.
• Right to restriction of processing: You have the right to request that 33bt restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of data is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive personal data you have provided to 33bt in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on 33bt's legitimate interests. 33bt will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

33bt will respond to all data rights requests within a reasonable timeframe and in any event within 30 calendar days of receipt of a valid request. In complex cases, this period may be extended by a further 30 days, in which case 33bt will inform you of the extension and the reason for it.

With your consent, 33bt may send you promotional communications via SMS to your registered Bangladeshi mobile number, or via other channels where you have opted in. These communications may include information about:

• New deposit bonuses, reload offers, and cashback promotions
• Seasonal promotions tied to events such as Eid, Pohela Boishakh, Victory Day (December 16), or Bangladesh Premier League (BPL) cricket season
• New games added to the slots, live casino, or fishing game categories
• VIP tier upgrades, Black Diamond tier invitations, and exclusive member benefits
• Responsible gaming reminders and account security notifications

You may opt out of marketing communications at any time by contacting the 33bt support team via live chat or by adjusting your notification preferences within your account settings. Opting out of marketing communications will not affect the delivery of transactional and account-related notifications (such as deposit confirmations, withdrawal processing updates, and OTP messages), which are essential to the operation of your account.

The 33bt Platform is strictly intended for adults. The minimum age requirement for registration and use of the Platform is 21 years of age. 33bt does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

Age verification is conducted during the registration process and as part of the KYC verification procedure. Any account found to belong to an individual under 21 years of age will be closed immediately, all activity on that account will be voided, and any personal data associated with the account will be handled in accordance with applicable law.

If you believe that a person under 21 years of age has registered an account on the 33bt Platform, please contact our support team immediately via live chat so that the matter can be investigated and addressed without delay.

The 33bt Platform integrates with third-party game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment method providers (including bKash, Nagad, Rocket, Upay, and major banks) to deliver its services. These third-party services operate under their own privacy policies and data practices, which are independent of this Policy.

33bt is not responsible for the privacy practices or the content of third-party services accessed through or in connection with the Platform. 33bt does not control the data collected or processed by these third parties in the course of their own service delivery. You are encouraged to review the privacy policies of any third-party services you interact with in connection with your use of the 33bt Platform.

Data shared with third-party partners by 33bt is limited to the minimum necessary for the specific purpose (e.g., transaction reference data for payment processing, or session token data for game delivery) and is governed by data processing agreements between 33bt and each partner.

33bt reserves the right to update or amend this Privacy Policy at any time to reflect changes in the Platform's data processing activities, applicable legal requirements, or industry standards. The date of the most recent revision is displayed in the "Last Updated" notice at the top of this document and in the hero section of this page.

Where a material change is made to this Policy — particularly any change that affects how your personal data is used or your rights in respect of it — 33bt will use reasonable efforts to notify you by SMS to your registered mobile number or by displaying a prominent notice on the Platform prior to the change taking effect.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of and, where applicable, consent to the changes described. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure by contacting the support team.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 33bt, please contact the support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the 33bt Platform. Average response time under 5 minutes.
• Email: [email protected] (plain text — not a clickable link). Response time: within 24 hours.
• Operating Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays.
• Time Zone: Bangladesh Standard Time (BST, UTC+6).

When submitting a data rights request, please provide your registered mobile number and, where possible, a brief description of the nature of your request so that our team can locate your account and process your request efficiently. 33bt is committed to handling all data requests with professionalism, confidentiality, and within the timeframes set out in Section 11 of this Policy.

33bt values the trust that over 50,000 registered players across Bangladesh have placed in the Platform. We are committed to maintaining that trust through transparent, lawful, and fair handling of your personal data at every stage of your relationship with 33bt.