33bad Privacy Policy

When you register an account on 33bad, we collect the following categories of personal information: (a) Identity data — full name, date of birth, and where required for KYC purposes, copies of government-issued identification documents such as a National ID card or passport; (b) Contact data — email address and mobile phone number; (c) Financial data — details of the payment accounts used for deposits and withdrawals, including bKash, Nagad, Rocket, and Upay mobile banking numbers; (d) Transaction data — records of all deposits, withdrawals, bonuses claimed, and bets placed on the platform; (e) Technical data — IP address, device type, operating system version, browser type, and session logs collected automatically when you access the platform; (f) Gameplay data — game history, betting patterns, and session duration, collected to ensure fair play compliance and for responsible gaming monitoring purposes.

33bad uses the personal information collected for the following purposes: (a) Account management — to create, verify, and maintain your player account on the platform; (b) Transaction processing — to facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, and supported banking channels in Bangladeshi Taka; (c) Identity verification — to fulfil KYC (Know Your Customer) obligations and confirm that players meet the minimum age requirement of 21 years; (d) Fraud prevention and security — to detect suspicious activity, prevent unauthorised account access, and protect the integrity of the platform; (e) Responsible gaming — to monitor gameplay patterns for indicators of problem gambling and to enforce self-exclusion requests; (f) Customer support — to respond to queries, complaints, and account-related requests submitted to the 33bad support team; (g) Platform improvement — to analyse aggregate, anonymised usage data to improve the user experience and game offering.

33bad does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data may be shared in limited circumstances with the following categories of third parties, solely for the purposes stated: (a) Payment processors — bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to process deposits and withdrawals; (b) Identity verification providers — KYC service providers may receive copies of identification documents for the purpose of age and identity verification; (c) Game content providers — game studios such as Pragmatic Play, Evolution Gaming, PG Soft, and Ezugi receive session data necessary to deliver games and calculate RTP. Game providers operate under their own data protection policies; (d) Legal and regulatory compliance — in circumstances where 33bad is required by law or court order to disclose user data to relevant authorities, such disclosure will be made in accordance with applicable legal requirements. In all cases, third-party data processing is governed by data processing agreements that require third parties to maintain appropriate security standards.

33bad retains personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, subject to any longer retention periods required by applicable law or regulatory obligation. Account data is retained for the duration of the active account relationship and for a period of no less than 5 years following account closure, in order to meet anti-money laundering record-keeping requirements. Transaction records are retained for a minimum of 5 years from the date of each transaction. Technical logs and device data are retained for up to 12 months. Where personal data is no longer required for any lawful purpose, it will be securely deleted or anonymised.

33bad uses cookies and similar tracking technologies on the platform. These include: (a) Essential cookies — required for basic platform functionality, such as maintaining your login session and remembering your language preference; (b) Performance cookies — used to collect anonymised data about how users interact with the platform, including which games are most visited and where users spend the most time; (c) Security cookies — used to detect and prevent fraudulent activity and to verify that users are human rather than automated bots. 33bad does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie settings through your browser, though disabling essential cookies may affect platform functionality.

33bad implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, secure encrypted storage for data at rest, access controls that restrict internal access to personal data on a need-to-know basis, regular security assessments and vulnerability testing, and two-factor authentication options available to registered users. Whilst 33bad takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be completely secure. In the event of a data breach that affects your rights or freedoms, 33bad will notify affected users as required by applicable data protection obligations.

As a user of the 33bad platform, you have the following rights in relation to your personal data: (a) Right of access — you may request a copy of the personal data held about you by 33bad; (b) Right to rectification — you may request correction of inaccurate or incomplete personal data; (c) Right to erasure — in certain circumstances you may request deletion of your personal data, subject to 33bad's legal retention obligations; (d) Right to restriction — you may request that 33bad restrict processing of your data in certain circumstances; (e) Right to object — you may object to processing of your data for certain purposes. To exercise any of these rights, please contact the 33bad support team via the email address listed in the contact section of the website. 33bad will respond to verified data subject requests within 30 days.

The 33bad platform is strictly for adults aged 21 and above. 33bad does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be closed. If you believe that a minor has registered on the platform, please contact the 33bad support team immediately so that the account can be investigated and action taken without delay.

The 33bad platform is operated primarily for users in Bangladesh. Some of the third-party service providers used by 33bad, including certain payment processors, KYC verification providers, and game content studios, may process data in jurisdictions outside Bangladesh. Where data is transferred internationally, 33bad ensures that appropriate safeguards are in place, including data processing agreements that require the receiving party to maintain data protection standards no less protective than those described in this Privacy Policy.

33bad may send registered players promotional communications about bonuses, new games, and seasonal offers via the contact details provided at registration. You may opt out of marketing communications at any time by contacting the 33bad support team or by following the unsubscribe instructions included in any promotional message. Opting out of marketing communications does not affect essential service communications such as transaction confirmations, account security alerts, or policy updates.