33vd Privacy Policy — How We Collect, Use & Protect Your Data

1 Introduction & Scope

This Privacy Policy ("Policy") describes how 33vd ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the services available at 33vd.io. This Policy applies in full to all registered account holders, visitors who browse the platform without registering, and individuals who interact with 33vd through any supported communication channel.

33vd is built specifically for the Bangladesh market and operates exclusively in English. All data processing activities described in this Policy are carried out in connection with providing online betting and casino gaming services — including cricket sportsbook, live casino, slots, baccarat, and related promotional services — to eligible adult players in Bangladesh.

This Policy should be read alongside the 33vd Terms & Conditions and the Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with 33vd. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy takes precedence for that specific matter.

2 Data Controller Identity

For the purposes of this Policy, 33vd acts as the data controller in respect of all personal data collected from players and visitors via 33vd.io. As data controller, 33vd determines the purposes for which personal data is collected and the manner in which it is processed.

If you have any questions about this Policy, wish to exercise any data right, or need to make a formal data-related complaint, please contact us using the details provided in Section 15 of this Policy. All data-related requests are reviewed and responded to by a designated member of our compliance team.

3 What Personal Data We Collect

The personal data we collect from players falls into several distinct categories, depending on how you interact with the platform. The table below provides a plain-English overview of each category, the specific data points within it, and the primary reason we collect that data.

We do not collect sensitive personal data (also known as special category data) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for the purpose of unique identification, except where an identity document submitted for KYC purposes incidentally contains such information. In such cases, only the minimum relevant fields (name, date of birth, ID number) are extracted and stored; the full document image is handled with enhanced security controls.

4 How We Collect Your Data

33vd collects personal data through the following channels and mechanisms:

• Direct provision by you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your Account settings, you directly provide us with personal data.
• Automated technical collection: When you visit or use 33vd.io, certain technical data — including your IP address, browser fingerprint, and session information — is automatically logged by our platform infrastructure. This happens even if you do not complete registration.
• Payment processor data: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a supported bank, the relevant payment processor confirms transaction status and may share associated account reference data with 33vd to enable reconciliation.
• Identity verification providers: Where 33vd uses a third-party KYC service to verify your identity documents, that provider may return structured identity data to 33vd confirming the result of the verification check.
• Cookies and tracking: 33vd uses first-party cookies and similar browser-storage technologies to maintain login sessions, remember preferences, and analyse platform usage patterns. Full details are provided in Section 7.

5 Legal Bases for Processing

Every data processing activity at 33vd is grounded in at least one of the following recognised legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including Account management, payment processing, and game delivery — is carried out on the basis that it is necessary to perform the contract between us.
• Legal obligation: Where applicable law requires us to collect, retain, or disclose certain data — such as identity verification records for anti-money laundering compliance — we process that data on the basis of legal obligation.
• Legitimate interests: Certain processing activities, including fraud detection, platform security, abuse prevention, and internal analytics used to improve the platform, are carried out on the basis of our legitimate interest in operating a safe and sustainable gambling platform.
• Consent: Where we wish to send you promotional communications, use non-essential cookies, or process data for purposes beyond those strictly necessary, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

The personal data we collect is used for the following purposes on the 33vd platform:

• Creating, maintaining, and administering your 33vd Account, including processing your registration, verifying your identity, and managing your Account preferences and settings.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and maintaining accurate transaction records in BDT.
• Delivering and improving the betting and gaming services available on the platform, including cricket sportsbook, live casino, slots, and baccarat.
• Administering bonus offers, promotional campaigns, loyalty rewards, and any other promotional services you opt into on the platform.
• Operating our responsible gaming programme — including monitoring for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion settings, and reaching out proactively to players who may need support.
• Detecting, investigating, and preventing fraudulent activity, multiple-account creation, bonus abuse, and any form of Prohibited Conduct as defined in the Terms & Conditions.
• Responding to your support enquiries submitted via live chat, WhatsApp, or email, and maintaining a record of those interactions for quality assurance purposes.
• Sending you transactional communications — such as deposit confirmations, withdrawal updates, and security alerts — which are not promotional in nature and are sent regardless of your marketing preferences.
• Sending you promotional communications — such as bonus offers, new game announcements, and seasonal promotions — strictly where you have provided prior consent to receive them.
• Conducting internal analytics and platform performance monitoring to identify technical issues, improve user experience, and inform product development decisions.

7 Cookies & Tracking Technologies

33vd uses cookies and similar browser-storage technologies (including localStorage and sessionStorage) on 33vd.io. Cookies are small text files stored on your device by your browser at the instruction of the website. They help the platform function correctly and allow us to understand how players use the site.

The cookies used on 33vd fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language display or deposit method — across sessions. These are set only where you have chosen to save such preferences.
• Analytics cookies: First-party analytics cookies that help us understand platform usage patterns, such as which game categories are most visited and where players encounter difficulties. These are anonymised and aggregated. 33vd does not use third-party advertising tracking cookies.

You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will prevent you from logging in and using the platform. No third-party advertising networks or social media tracking pixels are deployed on 33vd.io.

8 Third-Party Data Sharing

33vd does not sell, lease, or commercially share your personal data with any third party. We share data only where it is genuinely necessary to deliver the services you have requested, and only with the categories of recipients described below:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum financial and identity information required to process your deposit or withdrawal transactions. These processors operate under their own privacy policies and are subject to applicable Bangladeshi financial regulations.
• KYC and identity verification providers: Where we use a third-party verification service to confirm your identity documents, that provider receives only the specific documents needed for verification and returns a structured verification result. Document images are not retained by the provider beyond the verification process.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their game engines and, in the case of live dealer games, their studio infrastructure. These providers may receive session-level game data (such as bet amounts and round outcomes) as part of normal game operation. They do not receive your full identity profile.
• IT and hosting infrastructure providers: 33vd uses third-party cloud hosting and content delivery services to operate the platform. These providers process data solely as instructed by 33vd and under contractual data processing agreements that prohibit independent use of your data.
• Legal and regulatory disclosure: If required to do so by applicable law, court order, or instruction from a competent authority, 33vd may disclose personal data to law enforcement, regulatory bodies, or other authorised government agencies. We will notify you of any such disclosure where legally permitted to do so.

9 International Data Transfers

Some of the third-party service providers with whom 33vd shares data operate servers located outside Bangladesh. Where personal data is transferred internationally — for example, to cloud hosting infrastructure or to game content providers operating studios in other countries — 33vd ensures that appropriate contractual safeguards are in place before any transfer occurs.

These safeguards include, where applicable, standard contractual data protection clauses agreed between 33vd and the relevant third-party provider, as well as technical security measures such as end-to-end encryption of data in transit. 33vd does not transfer personal data to any country that does not provide an adequate level of data protection without first putting in place such contractual and technical protections.

10 Data Retention

33vd retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The table below summarises the key retention periods applied on the platform:

Once the applicable retention period has elapsed, personal data is either securely and permanently deleted from our systems or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

11 Your Data Rights

As a 33vd player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 15. All requests will be acknowledged within 3 business days and fully resolved within 14 business days. There is no charge for exercising any of these rights.

• Right of Access: You may request a copy of all personal data that 33vd holds about you. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. You can update basic contact details directly from your Account settings panel.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that certain data must be retained for the legally mandated periods described in Section 10, and erasure requests cannot override these obligations.
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and a review is pending — you may request that we pause active processing of your data while the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider if you choose.
• Right to Object: You may object at any time to processing carried out on the basis of our legitimate interests, including profiling activities conducted for fraud prevention or marketing analysis. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

12 Children's Privacy

33vd's services are strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The registration process includes an age declaration step, and all accounts are subject to KYC verification that confirms the Account holder meets the minimum age requirement.

If 33vd becomes aware — through any means — that an Account has been created by a person under the age of 21, that Account will be immediately suspended, all associated balances will be returned to the original payment source, and all personal data associated with the Account will be deleted as soon as practicable. If you have reason to believe that a minor has created an account on 33vd, please contact us immediately using the details in Section 15.

13 Security Measures

33vd employs a layered security architecture to protect the personal data of all platform users. The key technical and organisational measures in place include:

• Encryption in transit: All data transmitted between your browser and 33vd.io is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser address bar confirms that a secure connection is active.
• Encryption at rest: Personal data and financial records stored in 33vd's database infrastructure are encrypted at rest using AES-256 encryption. Encryption keys are managed through a separate, access-controlled key management system.
• Access controls: Access to systems holding personal data is restricted to authorised 33vd personnel only, on a strict need-to-know basis. All access is authenticated via multi-factor authentication (MFA) and logged for audit purposes.
• Password protection: Player account passwords are never stored in plain text. They are stored as salted cryptographic hashes using a current industry-standard algorithm. 33vd personnel cannot retrieve your password — only a reset can be initiated.
• Fraud detection systems: Automated monitoring systems run continuously to detect unusual account activity, suspicious login patterns, and potential fraudulent transactions. Flagged events trigger immediate human review.
• Regular security assessments: 33vd conducts periodic internal security reviews of its data handling practices and platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

While 33vd takes all reasonable and practical steps to protect your data, no system connected to the internet can be guaranteed to be completely secure against all forms of attack. You also have a role to play in protecting your own data — please use a strong, unique password for your 33vd Account, enable two-factor authentication, and never share your login credentials with anyone.

14 Changes to This Policy

33vd reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable law, or improvements to the platform. When material changes are made to this Policy, we will notify registered players by posting a prominent notice on the platform and, where the changes are significant, by sending a direct notification to your registered contact details.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically so that you remain informed about how 33vd handles your personal data. Your continued use of the platform after the effective date of any updated Policy constitutes your acknowledgement of the revised terms.

15 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 11, or want to raise a data-related concern or complaint, please reach out to the 33vd support and compliance team through any of the following channels:

• Email: support at 33vd.io — for formal data rights requests, please use "Data Rights Request" as your subject line
• Live Chat: Available 24/7 directly on the 33vd platform — suitable for general privacy questions and initial contact
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (UTC+6) business hours

All formal data rights requests submitted by email are acknowledged within 3 business days and fully resolved within 14 business days of identity verification being completed. 33vd does not charge any fee for processing data rights requests, regardless of the nature or volume of the request.

If you are dissatisfied with how 33vd has handled your personal data or responded to a data rights request, you have the right to escalate your complaint through appropriate legal channels available in your jurisdiction. 33vd is committed to working constructively with you to resolve any data-related concern before escalation becomes necessary.