Privacy Policy for 33dd —
Your Data, Our Responsibility

33dd is an online casino and sports betting platform operating under the domain 33dd.io, designed and built primarily for players based in Bangladesh. The platform offers a comprehensive range of gaming products including live dealer casino games, RNG-based slot titles from certified providers, and a sportsbook covering cricket (BPL, IPL, T20 World Cup), football, kabaddi, and other major sports and tournaments.

For the purposes of this Privacy Policy, 33dd acts as the data controller in respect of personal data collected directly from players via the platform. Our primary contact for data-related enquiries is [email protected] (plain text — not a clickable link).

33dd is committed to operating transparently, responsibly, and in accordance with fair data practices. We treat the protection of your personal information as a fundamental obligation, not merely a compliance requirement. All players interacting with 33dd — including residents of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — are afforded the same data protection standards regardless of their location within Bangladesh.

33dd collects personal data through several channels: directly from you when you register and use the platform, automatically when you interact with our website and apps, and occasionally from third-party verification and payment service providers. The categories of personal data we collect include the following:

We do not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health conditions (except as voluntarily disclosed in the context of a responsible gaming self-exclusion request), or political opinions. Where any such data is shared with us voluntarily, it will be handled with the highest level of care and will not be used for any purpose beyond the specific context in which it was disclosed.

The personal data collected by 33dd is used for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent or establishing a fresh legal basis for the new processing activity.

• Account Creation and Management: To create and maintain your player account, verify your identity at registration and during ongoing KYC reviews, and enable access to the full range of 33dd platform features.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods. Financial data is passed to payment processors solely for the purpose of completing the transaction.
• Legal and Regulatory Compliance: To fulfil Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, including identity verification, source-of-funds checks, and transaction monitoring where required.
• Customer Support: To respond to enquiries, resolve complaints, handle disputes, and deliver the technical assistance needed to maintain your account in good standing.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, and any other conduct that violates the 33dd Terms & Conditions.
• Responsible Gaming: To administer player-requested tools including deposit limits, cool-off periods, and self-exclusions, and to identify patterns of play that may indicate a player requires additional support.
• Service Improvement: To analyse aggregated and anonymised usage data for the purpose of improving platform performance, game selection, and user experience. This analysis does not involve individual profiling.
• Communications: To send you service-related notifications including account verification emails, withdrawal confirmations, security alerts, and updates to our Terms or this Privacy Policy. Where you have opted in, we may also send promotional communications about bonuses and offers — you may opt out of these at any time.

For each processing activity described in this Policy, 33dd relies on one or more of the following legal bases:

• Contractual Necessity: Processing that is required to fulfil our obligations under the player account agreement, including account creation, payment processing, game provision, and customer support.
• Legal Obligation: Processing that is required to comply with applicable laws, including KYC identity verification, AML transaction monitoring, and data retention obligations imposed by financial regulations.
• Legitimate Interests: Processing for purposes such as fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms. We conduct a balancing assessment before relying on legitimate interests as a legal basis.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — in particular, the sending of promotional and marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

33dd does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data may be shared with third parties only in the following specific and controlled circumstances:

• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with our approved payment service providers (including mobile banking operators such as bKash, Nagad, and Rocket, and banking partners). These processors are bound by strict data processing agreements and may only use your data to complete the specific transaction.
• Identity Verification Providers: Identity and document data submitted during KYC is processed by certified third-party identity verification services. These providers operate under confidentiality obligations and may only use the data for the specific verification purpose.
• Game Technology Providers: Usage data (such as bet amounts, game session data, and account balance information) is shared with our game technology partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary for the delivery and settlement of individual game rounds. These providers are certified, audited third parties who handle such data as part of their standard game delivery infrastructure.
• Legal and Regulatory Authorities: In response to a valid legal request, court order, or regulatory investigation, 33dd may be required to disclose personal data to relevant authorities. Where permitted by law, we will notify you of such a request before complying.
• Fraud Prevention and Security Services: In cases of suspected fraud, money laundering, or criminal activity, data may be shared with specialist fraud prevention or cybersecurity firms engaged to investigate and mitigate the specific threat.

In all cases where data is shared with third parties, we apply contractual safeguards to ensure that the recipient treats the data with the same standard of care and confidentiality that 33dd applies internally.

Some of 33dd's third-party service providers — in particular, game technology platforms and cloud infrastructure providers — may process or store data on servers located outside Bangladesh. Where personal data is transferred internationally, 33dd ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections afforded under this Policy.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, ensuring that the recipient organisation maintains equivalent technical and organisational security measures, and, where applicable, relying on adequacy determinations or other recognised transfer mechanisms.

If you wish to obtain more information about the specific safeguards applied to any particular international transfer of your data, please contact us at [email protected].

33dd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to maintain an active player account, or to comply with applicable legal and regulatory obligations. The following general retention periods apply:

When data is no longer required for any retained purpose, it is securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual.

33dd implements a layered approach to data security that combines technical, organisational, and procedural controls designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The key security measures in place include:

• Transport Encryption: All data transmitted between your device and the 33dd platform is encrypted using 256-bit SSL/TLS protocols. This ensures that sensitive information — including login credentials, financial data, and personal details — cannot be intercepted in transit.
• At-Rest Encryption: Personal and financial data stored in our databases is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data and are subject to access controls.
• Access Control: Access to systems holding personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication: Administrative access to internal systems is protected by multi-factor authentication. Players are also encouraged to enable two-factor authentication on their own accounts for additional security.
• Regular Security Assessments: 33dd conducts periodic security assessments and vulnerability testing of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed data security incident that may affect your personal data, 33dd will notify affected players without undue delay and will take all necessary steps to contain, investigate, and remediate the incident.

While 33dd takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. You play an important role in your own data security by keeping your account credentials confidential and reporting any suspected unauthorised access to [email protected] immediately.

33dd uses cookies and similar technologies (including local storage and session tokens) to enable the platform to function correctly, remember your preferences, and understand how players interact with our service. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They manage your authenticated session, maintain your account state across page loads, and enable core functionality such as the bet slip, game launcher, and cashier. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: These cookies remember your preferences — such as your selected language, preferred game view, and responsible gaming settings — so you do not need to re-enter them on each visit. Disabling these cookies will result in a reduced experience but will not prevent you from accessing the platform.
• Analytics Cookies: We use privacy-respecting analytics tools to collect aggregated, anonymised data about how players navigate the platform. This information is used solely to improve the service and does not identify individual players. No data from analytics cookies is shared with advertising networks.

33dd does not use third-party advertising cookies, retargeting pixels, behavioural profiling trackers, or any technology that tracks you across websites other than 33dd.io. You may manage cookie preferences through your browser settings, although disabling strictly necessary cookies will impair platform functionality.

As a 33dd player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all verified requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that 33dd holds about you, along with an explanation of how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing has been found to be unlawful. This right is subject to legal retention obligations — for example, we are required to retain financial transaction records for regulatory purposes even after account closure.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while the accuracy of data is being contested, or while an objection to processing is under consideration.
• Right to Data Portability: Where processing is based on your consent or on a contractual obligation, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

33dd operates a strict minimum age policy. The platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 21. If we become aware that a person under the age of 21 has registered an account or provided personal data to the platform, we will immediately close that account, delete all associated personal data, and return any deposited funds.

If you have reason to believe that a minor may have accessed or registered an account on the 33dd platform, please notify us immediately at [email protected]. We take all such reports seriously and will investigate without delay. Parents and guardians are encouraged to use parental control software and to maintain open conversations with young people about the risks of underage gambling.

The 33dd platform may contain references to third-party services — for example, payment service providers accessed through the cashier interface, or game providers whose titles are launched through the platform. While 33dd selects its partners carefully and requires all partners to meet minimum data protection standards, we are not responsible for the privacy practices of third-party services or websites.

Once you navigate away from the 33dd platform to a third-party website or service, this Privacy Policy no longer applies. We encourage you to review the privacy notice of any third-party service you interact with independently of 33dd.

33dd reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be accessible at 33dd.io/privacy-policy. The "Last updated" date at the top of this document reflects the date on which the most recent changes took effect.

Where changes are material — meaning they significantly alter your rights or the way in which your data is processed — we will notify you by email to your registered address or via a prominent notice on the platform at least 14 days before the changes come into effect. For non-material changes (such as typographical corrections or clarifications that do not affect your rights), we may update the Policy without prior notice.

Continued use of the 33dd platform following the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you should cease using the platform and close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 33dd handles your personal data, please contact our support team in writing at [email protected]. We aim to respond to all data-related enquiries within 30 days of receipt.

If you are not satisfied with our response, or if you believe that 33dd is processing your personal data in a manner that is inconsistent with this Policy or applicable data protection principles, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.

All complaints received by 33dd are logged, tracked, and reviewed by our compliance team. We take every complaint seriously and are committed to resolving data protection concerns promptly, fairly, and transparently. Where a complaint reveals a systemic issue with our data handling practices, we will take corrective action to prevent recurrence.