33d Privacy Policy — Your Data, Your Rights

1. Introduction

33d ("we", "us", "our") operates the online gaming platform available at 33d.bio. We are committed to protecting the privacy and personal data of all players who use our platform. This Privacy Policy describes how we collect, use, store, share, and protect personal information in connection with your registration and use of the 33d platform. It also sets out the rights you have over your personal data and how to exercise those rights.

By registering an account on 33d or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use the platform and contact support to request account closure. This policy applies to all players accessing 33d from Bangladesh and any other jurisdiction.

2. Information We Collect

We collect personal information directly from you when you register, make transactions, contact support, or use the platform, and automatically through your use of the site. The categories of information we collect include:

3. How We Use Your Information

We use the personal information we collect from you for the following purposes. Each use is grounded in a lawful basis for processing as described in Section 4 below:

• 1
  Account creation and management: to register your account, verify your identity (KYC), maintain your player profile, process your login credentials, and update your account settings when requested.
• 2
  Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify payment method ownership; to maintain transaction records for accounting and reconciliation; and to detect and prevent payment fraud.
• 3
  Platform provision and support: to provide access to games, sports betting markets, and all platform features; to respond to your support queries; to investigate and resolve disputes; and to improve platform functionality based on usage patterns.
• 4
  Legal and regulatory compliance: to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations; to retain records as required by law; and to respond to lawful requests from competent authorities.
• 5
  Responsible gaming: to monitor gaming activity for signs of problem gambling; to apply and enforce responsible gaming tools such as deposit limits and self-exclusion; and to contact you if our systems identify patterns of concern.
• 6
  Marketing and promotions: to send you promotional messages about bonuses, offers, and platform updates — but only where you have given us consent to do so, or where we have a legitimate interest. You may opt out of marketing communications at any time through your account settings or by contacting support.

4. Legal Basis for Processing

Each category of data processing we carry out is grounded in one or more of the following legal bases:

5. Sharing Your Information

33d does not sell, rent, or trade your personal data to third parties for marketing purposes. We share your personal information only in the following limited circumstances:

• 1
  Service providers: We share data with carefully selected third-party service providers who process data on our behalf and under our instructions. These include payment processors (bKash, Nagad gateway operators), game software providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi), identity verification providers, fraud detection systems, and customer support platforms. All service providers are contractually bound to process your data only for the purposes we specify and to maintain appropriate security standards.
• 2
  Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulators, courts, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of 33d, its players, or others.
• 3
  Business transfers: In the event of a merger, acquisition, or sale of all or part of 33d's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.
• 4
  With your consent: We may share your data in other ways not described above where you have given us explicit prior consent to do so. You may withdraw any such consent at any time by contacting [email protected].

33d does not transfer your personal data outside of the jurisdictions covered by our service providers' processing agreements without ensuring that appropriate safeguards are in place. Where data is processed by service providers located outside Bangladesh, we require that such processing is covered by appropriate contractual data protection clauses.

6. Payment Data and Financial Information

33d takes the security of financial data with particular seriousness. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through those providers' secure APIs. 33d does not store your full bKash PIN, Nagad PIN, card number, or CVV on its own servers. What we do retain is a tokenised reference to the payment method and a complete record of each transaction for audit and reconciliation purposes.

All payment transactions on 33d are protected by SSL (Secure Sockets Layer) encryption in transit. We require that all payment method accounts used on the platform are registered in the name of the account holder, which forms part of our anti-fraud and AML compliance obligations. Where a mismatch between a player's registered name and a payment method name is detected, the transaction will be held for manual review and may be declined pending verification.

7. Data Retention

33d retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data and transaction records are retained for a minimum of five years from the date of your last transaction or account closure, whichever is later, in order to comply with applicable AML and financial record-keeping requirements. Gaming activity logs are retained for a minimum of three years. Communications data (support transcripts, emails) is retained for two years from the date of the last communication.

When personal data is no longer required for any purpose and is not subject to any legal retention obligation, 33d will securely delete or anonymise it. Where full deletion is not technically feasible (for example, data held in encrypted backup archives), we will ensure the data is isolated from further active processing until deletion is possible.

8. Security Measures

33d employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data in transit between your device and our servers; encrypted storage of sensitive personal data at rest; access controls limiting internal data access to authorised personnel only on a need-to-know basis; regular security audits and vulnerability assessments of our platform infrastructure; and two-factor authentication options available for player accounts.

While we take all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials secure. If you suspect that your account has been accessed without your authorisation, please contact [email protected] immediately. In the event of a data breach that affects your personal data and creates a high risk to your rights, we will notify you without undue delay.

9. Your Rights Over Your Data

Subject to applicable law, you have the following rights in relation to your personal data held by 33d. To exercise any of these rights, please contact [email protected] with your full name, registered mobile number, and a description of the right you wish to exercise. We will respond within 30 days of receiving a valid request.

• Access
  Right of Access

  You have the right to request a copy of all personal data 33d holds about you, together with information about how it is being used and with whom it has been shared.
• Rectification
  Right to Rectification

  You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. Where the corrected data affects a legal or regulatory obligation (for example, a KYC record), we may require supporting documentation.
• Erasure
  Right to Erasure

  In certain circumstances, you have the right to request that we delete your personal data. This right does not apply where we are required by law to retain data (for example, AML transaction records) or where the data is necessary to resolve an open dispute or complaint.
• Restriction
  Right to Restrict Processing

  You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on our legitimate interests, while we consider your objection.
• Objection
  Right to Object

  You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have the right to object to receiving direct marketing communications at any time, regardless of the legal basis for that processing.

To exercise any of the rights listed above, please contact our support team at [email protected]. We may need to verify your identity before processing your request. We will not charge a fee for handling rights requests unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request.

10. Cookies and Tracking Technologies

33d uses cookies and similar tracking technologies to operate the platform, remember your login session, maintain your preferences, and analyse platform performance. Cookies are small text files placed on your device by the 33d platform when you access the site. We use the following types of cookies: essential cookies (required for the platform to function — these cannot be disabled); functional cookies (which remember your language preference and session settings); and analytics cookies (which help us understand how players use the platform so we can improve it).

You can control cookie settings through your browser settings. Disabling essential cookies will prevent the 33d platform from functioning correctly. Disabling analytics cookies will not affect your ability to use the platform. 33d does not use third-party advertising cookies or cross-site tracking cookies that share your data with advertising networks.

11. Children's Privacy

33d is an adult platform. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately delete that data and close the associated account. If you believe that a person under 21 has registered on 33d, please notify us at [email protected] immediately. Parents and guardians are encouraged to monitor the online activities of minors in their household and to use appropriate parental control tools to prevent minors from accessing adult gambling platforms.

12. Changes to This Privacy Policy

33d reserves the right to update this Privacy Policy at any time. When we make material changes to this policy, we will update the "Last updated" date at the top of this page and notify registered players via a platform notification. The updated policy will take effect immediately upon posting. Your continued use of the platform after the updated policy has been posted constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 33d protects your personal data. If you have any concerns about the changes made to this policy, please contact [email protected] before continuing to use the platform.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 33d holds about you, please contact our support team. All privacy-related queries are handled confidentially and in English. We aim to respond to all data subject requests within 30 days of receipt.