bdt33 Privacy Policy —
Your Data, Your Rights

1. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "bdt33" / "we" / "us" / "our" refers to the operator of the bdt33 platform at https://bdt33.io.
• "Player" / "you" / "your" refers to any individual who registers an account, makes a deposit, places a bet, or otherwise uses the bdt33 platform.
• "Personal Data" means any information relating to an identified or identifiable natural person — including name, date of birth, contact details, financial data, device identifiers, and behavioral records — processed by bdt33 in connection with the operation of the platform.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means bdt33 in its capacity as the entity that determines the purposes and means of processing personal data collected through the platform.
• "KYC" (Know Your Customer) refers to the identity and age verification process required before withdrawals are authorised or account limits are raised.
• "Cookie" means a small text file stored on a Player's device by the bdt33 platform for the purposes described in Section 9.
• "Third-Party Service Provider" means any external company contracted by bdt33 to provide services essential to platform operations, including payment processors, game software providers, fraud detection services, and customer support platforms.

2. Data We Collect

2.1 Registration Data

When you create a bdt33 account, we collect the following information:

• Full legal name (first name and surname as it appears on your government-issued ID).
• Date of birth (to verify that you are 21 years of age or older).
• Mobile phone number (used for account verification and security OTPs).
• Email address (used for account communications and support correspondence).
• Residential city or district within Bangladesh (used for fraud prevention and regional compliance checks).
• Username and encrypted password (we store only a cryptographic hash of your password — we never store or have access to your plaintext password).

2.2 Identity Verification (KYC) Data

If you request a withdrawal above the standard threshold, or if our systems flag your account for enhanced due diligence, we may request:

• A copy of your National Identity Card (NID), passport, or other government-issued photo ID.
• A photograph or selfie for liveness verification (to confirm that the submitted ID belongs to the account holder).
• Proof of ownership of the payment method used for deposits (e.g., a screenshot of your bKash or Nagad account registered under your name).
• Proof of source of funds in cases where high-value deposits trigger enhanced AML (Anti-Money Laundering) checks.

2.3 Financial Transaction Data

For every deposit and withdrawal processed through your bdt33 account, we record:

• Transaction type (deposit or withdrawal), amount in BDT (৳), timestamp, and status.
• Payment method reference (e.g., the last four digits of your bKash or Nagad mobile number, or the masked bank account number for bank transfers).
• Transaction reference IDs issued by the payment provider.

We do not store full mobile banking PIN codes, full bank account numbers, or Visa/Mastercard card numbers on our servers.

2.4 Gaming Activity Data

We maintain records of your activity on the bdt33 platform, including:

• All bets placed, including the game or market, stake amount, odds (where applicable), and settlement outcome.
• Casino game session logs (game name, provider, session start/end time, total wagered, net outcome).
• Bonus and promotion claims, wagering progress, and bonus settlement records.
• Responsible gaming tool activations (deposit limit settings, self-exclusion requests, cooling-off periods).

2.5 Technical and Device Data

When you access bdt33 through a browser or mobile device, we automatically collect:

• IP address at the time of login and at regular session intervals.
• Device type, operating system, and browser version.
• Screen resolution and language settings.
• Session duration, pages visited, and navigation path within the platform.
• Referrer URL (the page you visited immediately before arriving at bdt33, if applicable).

2.6 Communications Data

We retain records of your communications with the bdt33 support team, including:

• Live chat transcripts.
• Email correspondence sent to or from [email protected].
• Formal complaint submissions and our written responses.

3. How We Collect Data

bdt33 collects personal data through the following methods:

• Directly from you — when you register an account, submit KYC documents, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — through server logs, session tracking technology, and cookies placed on your device when you visit or use the platform.
• From payment providers — bKash, Nagad, Rocket, Upay, and partner banks may share transaction confirmation data with us as part of the payment processing workflow.
• From game providers — third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt) may share session-level data with us to populate your gaming history on the platform.
• From fraud prevention services — third-party risk and fraud detection partners may provide signals or scores derived from device fingerprinting or behavioral analytics to help us identify suspicious account activity.

4. Lawful Bases for Processing

bdt33 processes your personal data only where a lawful basis exists. The primary bases on which we rely are:

Lawful Basis	Examples of Processing Activities
Contract Performance	Processing deposits and withdrawals; maintaining your account balance; settling bets; applying bonuses.
Legal Obligation	KYC/AML verification; age verification (21+); retaining financial transaction records; reporting to law enforcement when legally required.
Legitimate Interests	Fraud detection and prevention; platform security monitoring; game audit logging; responsible gaming monitoring to identify at-risk players.
Consent	Sending optional promotional emails or SMS messages about bonuses and offers (where you have opted in). You may withdraw this consent at any time.

5. How We Use Your Data

The personal data collected by bdt33 is used for the following purposes:

• Account creation and management — setting up and maintaining your bdt33 account, authenticating your identity at login, and managing your profile settings.
• Payment processing — facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and partner banks, and reconciling transactions in BDT.
• Age and identity verification — ensuring all active players are 21 years of age or older, in accordance with our Terms & Conditions and responsible gaming obligations.
• Bet settlement and game delivery — processing bet outcomes, crediting winnings, applying bonus wagering progress, and transmitting game session data to and from third-party game providers.
• Customer support — responding to your queries, resolving complaints, and improving our support processes based on interaction history.
• Fraud prevention and security — detecting and investigating suspicious login activity, duplicate accounts, payment fraud, match-fixing indicators, and other prohibited conduct.
• Responsible gaming — monitoring gaming patterns that may indicate problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and proactively reaching out to at-risk players in accordance with our Responsible Gaming policy.
• Legal and regulatory compliance — maintaining records required by anti-money laundering (AML) obligations, responding to lawful requests from law enforcement or regulatory bodies, and enforcing our Terms & Conditions.
• Platform improvement — analysing aggregated, anonymised usage data to improve the bdt33 platform's features, performance, and user experience.
• Marketing communications (opt-in only) — sending promotional offers, bonus notifications, and seasonal campaign information to players who have explicitly opted in to marketing communications. You can opt out at any time.

6. Data Sharing & Disclosure

bdt33 does not sell or rent personal data. We share personal data only in the following circumstances:

6.1 Payment Service Providers

We share the minimum necessary personal data (your name, registered mobile number or bank account details, and transaction amount) with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank strictly to process deposits and withdrawals. These providers are contractually bound to process data only for payment purposes and in accordance with applicable data protection standards.

6.2 Game Software Providers

To deliver casino games, live dealer experiences, and sports betting markets, bdt33 transmits session tokens and player identifiers to third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive the minimum data required to authenticate your session and record game outcomes. They are not authorised to use this data for their own marketing purposes.

6.3 Fraud and Risk Management Partners

bdt33 uses third-party fraud detection and device fingerprinting services to help identify suspicious activity, bot usage, and multi-account violations. These services process device and behavioural data in accordance with their own privacy policies and our data processing agreements. No more data than is necessary for fraud assessment is shared.

6.4 Legal and Regulatory Disclosure

bdt33 may disclose personal data to law enforcement agencies, courts, or regulatory bodies if we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will always endeavour to notify affected players of any such disclosure to the extent that we are legally permitted to do so.

6.5 Business Transfers

In the event that bdt33's business is transferred, acquired, or merged with another entity, personal data held about players may be transferred to the successor entity as part of that transaction. Players will be notified in advance of any such transfer and of any changes to privacy practices that may result from it.

7. Data Retention

bdt33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention periods:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and AML obligation
KYC / identity documents	5 years after account closure or last transaction	Anti-money laundering compliance
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Gaming activity logs	3 years from the session date	Dispute resolution and audit
Support communications	3 years from last interaction	Complaint handling and quality review
Marketing consent records	Until withdrawn + 2 years	Proof of consent obligation
Technical/device logs	90 days from collection	Security monitoring

Once the applicable retention period expires, personal data is either permanently deleted from our systems or anonymised so that it can no longer be attributed to any individual.

8. Security Measures

bdt33 employs a layered security architecture to protect the personal data of all players on the platform. The key technical and organisational measures in place include:

• SSL/TLS Encryption in Transit: All connections between your device and bdt33's servers are encrypted using TLS 1.2 or higher. This prevents interception of data transmitted over the network, including login credentials, payment data, and personal information.
• Encryption at Rest: Sensitive personal data stored in our databases — including KYC documents, payment references, and hashed credentials — is encrypted at rest using AES-256 encryption.
• Password Hashing: Player passwords are never stored in plaintext. We use a strong, salted cryptographic hashing algorithm so that even in the unlikely event of a database breach, your actual password cannot be recovered.
• Two-Factor Authentication (2FA): bdt33 supports and encourages the use of OTP-based two-factor authentication at login to add a second layer of account security beyond the password alone.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff members who do not require access to personal data to perform their duties are not granted it. All internal data access is logged and reviewed.
• Regular Security Audits: Our platform undergoes periodic technical security reviews to identify and remediate vulnerabilities in the system. Third-party penetration testing is conducted as part of our ongoing security programme.
• Incident Response Plan: In the event of a personal data breach that poses a risk to players, bdt33 maintains an incident response plan to contain the breach, assess the impact, and notify affected players as quickly as practicable.

While we take all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are also responsible for maintaining the security of their own account credentials and should use a strong, unique password for their bdt33 account.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, and usage behaviour — and to improve your experience on subsequent visits.

9.2 How bdt33 Uses Cookies

bdt33 uses the following categories of cookies on the platform:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account state, and ensure the platform functions correctly. These cookies cannot be disabled without breaking core functionality.	Session / up to 24 hours
Functional	Remember your preferences such as language settings, preferred game lobby view, and responsible gaming tool configurations.	Up to 12 months
Analytics	Collect anonymised data about how players navigate the platform — which pages are visited, where players drop off, and which features are most used. This data is used solely to improve the platform experience.	Up to 13 months
Security	Help detect and prevent fraudulent logins, bot activity, and multi-account violations by fingerprinting the device and session environment.	Session / up to 30 days

9.3 Managing Your Cookie Preferences

Strictly necessary and security cookies are set automatically and cannot be disabled, as they are essential for the platform to function and for your account to remain secure. Functional and analytics cookies may be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or settings menus. Please note that blocking functional cookies may affect your experience on the platform — for example, your preference settings may not be saved between sessions.

bdt33 does not use advertising cookies or third-party tracking pixels for retargeting campaigns. We do not share cookie-derived data with social media platforms or advertising networks.

10. Your Data Rights

As a player on the bdt33 platform, you hold meaningful rights over your personal data. These rights are described below. To exercise any of these rights, contact us via live chat or at [email protected]. We will respond to verified requests within 30 calendar days.

11. Protection of Minors

bdt33 is strictly an adults-only platform. All players must be 21 years of age or older to register an account, make a deposit, or participate in any betting or gaming activity on the platform. This age restriction applies to all players regardless of the legal minimum gambling age in any jurisdiction.

We do not knowingly collect personal data from individuals under the age of 21. As part of our registration process, all players are required to confirm that they are aged 21 or above. Where our KYC process reveals that a player is below the required age, the account will be immediately suspended, all pending transactions cancelled, and any deposited funds returned to the source payment method after identity verification is complete.

If you have reason to believe that a minor has registered an account on bdt33 or is using an adult's account to access the platform, please contact us immediately at [email protected]. We take all such reports seriously and will investigate promptly.

Parents and guardians who are concerned about minors accessing online gambling services are encouraged to use parental control software to restrict access to gambling websites on devices used by children and young adults.

12. International Data Transfers

bdt33 primarily serves players in Bangladesh and processes the majority of personal data within secure data centres that serve the South and Southeast Asian region. However, some of our third-party service providers — including certain game software studios and fraud prevention partners — may process data in other jurisdictions.

Where personal data is transferred outside Bangladesh to a country that may not have equivalent data protection standards, bdt33 takes steps to ensure that appropriate safeguards are in place. These safeguards include contractual data processing agreements with our service providers that require them to process your data in a manner consistent with the standards described in this Privacy Policy.

By registering and using the bdt33 platform, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh for the purposes described in this Privacy Policy, subject to the safeguards described above.

13. Changes to This Privacy Policy

bdt33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify active players through a prominent notice on the platform or via a message to the registered contact details associated with your account.

The revised Privacy Policy will take effect on the date specified in the notification, which will be no less than 7 days from the date of notification for material changes. Minor clarifications or corrections that do not alter your rights or our core data practices may take effect immediately.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the bdt33 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

14. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the bdt33 data team through the following channels:

• Live Chat: Available 24/7 directly on the bdt33 platform — the fastest way to reach us for urgent privacy matters.
• Email: [email protected] — please include "Privacy Request" in the subject line, along with your registered username and a clear description of your query. We aim to respond within 24 hours (Bangladesh Standard Time, UTC+6) for general queries and within 30 calendar days for formal data rights requests.

When submitting a data rights request by email, please provide your registered account username, the specific right you wish to exercise (e.g., access, rectification, erasure), and any supporting documentation that will help us verify your identity and locate your records efficiently. We will not act on data rights requests that we cannot verify, in order to protect the security of all player accounts.