33cb Privacy Policy

1 Information We Collect

33cb collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and occasionally from third-party verification or payment service providers. The categories of personal data we collect are described in full below.

1.1 Registration Data

When you create a 33cb account, we collect the following information which you provide directly:

• Full legal name, as it appears on your government-issued identity document
• Date of birth, to confirm you are at least 18 years of age
• Residential address within Bangladesh (city, district, full postal address)
• Email address — used for account communications, security alerts, and promotional messages (where consent is given)
• Mobile phone number registered in Bangladesh
• Username and encrypted password (passwords are stored using one-way hashing; we never store or access your plaintext password)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we collect copies of identity documents submitted during the account verification process. This may include:

• Bangladesh National Identity Card (NID) — front and back scan or photograph
• Valid Bangladeshi passport — photo page scan
• Valid driving licence — where used as a supplementary document
• Recent utility bill or bank statement — used to verify residential address where required
• Selfie photograph or short video — used for liveness verification in high-risk or re-verification scenarios

KYC documents are processed securely and are accessible only to authorised compliance personnel. They are never shared with third parties except as required by law or for the purpose of completing identity verification via an accredited verification service provider.

1.3 Payment and Transaction Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a linked Bangladeshi bank account, 33cb records the following transaction data:

• Payment method type (e.g., bKash, Nagad, bank transfer)
• Mobile wallet number or masked bank account reference used for the transaction
• Transaction amount in Bangladeshi Taka (BDT)
• Date, time, and transaction reference number
• Transaction status (completed, pending, failed, reversed)

33cb does not store full payment card numbers, CVV codes, or full bank account numbers. All sensitive payment data is tokenised or handled entirely by the relevant payment processor and is not retained on 33cb's own servers.

1.4 Technical and Usage Data

When you browse or use the 33cb platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation paths within the site
• Game sessions initiated, bet history, and gameplay events
• Login timestamps, logout timestamps, and session activity logs
• Error logs and crash reports generated during platform use

This technical data is used for platform security monitoring, fraud detection, responsible gambling oversight, and service improvement. It is not used to build advertising profiles or shared with advertisers.

1.5 Communication Data

If you contact the 33cb support team via email at [email protected], or through any live chat or ticketing system integrated into the platform, we retain records of those communications. This includes the content of your messages, the date and time of correspondence, and the resolution outcome of any support request. These records are kept to maintain service quality, resolve disputes, and ensure consistency in player support.

2 How We Use Your Data

33cb processes personal data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which your data is processed are set out below.

2.1 Promotional Communications

33cb will only send you promotional emails, SMS messages, or platform notifications if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account dashboard, or by contacting the support team at [email protected]. Withdrawal of consent for marketing communications does not affect your ability to receive essential account notifications, security alerts, or service updates, which are sent regardless of marketing preferences.

2.2 Automated Decision-Making

33cb uses automated systems to detect unusual account activity, flag potential bonus abuse, and identify patterns associated with problem gambling behaviour. In most cases, automated flags trigger a manual review by a trained compliance or responsible gambling team member before any account action is taken. Where an automated system makes a decision that directly affects your account — such as a temporary transaction hold — you have the right to request a human review of that decision by contacting [email protected].

3 Data Sharing and Disclosure

33cb does not sell, rent, or trade your personal data to any third party. We share data only where it is strictly necessary for the operation of the platform, where we are legally required to do so, or where you have given explicit consent. The categories of recipients with whom data may be shared are described below.

3.1 Payment Service Providers

To process deposits and withdrawals, 33cb shares necessary transaction data with the relevant payment processors — including bKash, Nagad, Rocket, Upay, and partner banks such as Dutch-Bangla Bank, BRAC Bank, and City Bank. Data shared with payment processors is limited to what is required to complete the specific transaction and is governed by the data security standards applicable to each processor.

3.2 Identity Verification Providers

For KYC identity verification, 33cb may share document images and personal details with accredited third-party identity verification service providers. These providers are contractually bound to use the data solely for the purpose of verification and must comply with data security standards equivalent to those applied by 33cb itself.

3.3 Technology and Infrastructure Providers

33cb uses third-party cloud hosting, database management, and cybersecurity services to operate the platform. These providers act as data processors on our behalf under formal data processing agreements. They are permitted to access personal data only to the extent necessary to deliver their contracted services and are prohibited from using 33cb player data for any other purpose.

3.4 Legal and Regulatory Disclosure

33cb may disclose personal data to law enforcement agencies, regulatory bodies, or financial intelligence units if required to do so by applicable law, court order, or official regulatory request. Such disclosures are made only to the extent required by the relevant legal obligation and are documented internally for accountability purposes.

4 Cookies and Tracking Technologies

33cb uses cookies and similar browser-based technologies to ensure the platform works correctly, to keep your session active while you are logged in, and to collect anonymised usage statistics that help us improve the site experience. This section explains the types of cookies used and how you can manage them.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled without breaking core functionality. They include session cookies that keep you logged in as you navigate between pages, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure consistent server performance during high-traffic periods. No personal data is transmitted to third parties through strictly necessary cookies.

4.2 Analytics and Performance Cookies

33cb uses anonymised analytics data to understand how players interact with the platform — which pages are most visited, where users encounter navigation difficulties, and how session behaviour varies across device types. This data is collected in aggregated, non-identifiable form and is used exclusively for internal platform improvement. Analytics cookies do not track your activity across other websites.

4.3 Preference Cookies

Preference cookies remember settings you have configured during your session — such as your preferred language, display settings, or game lobby filters. These cookies improve your experience by ensuring the platform respects your settings across sessions without requiring you to reconfigure them on every visit.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Blocking strictly necessary cookies will impair your ability to log in and use the platform. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor (Chrome, Firefox, Safari, Edge, or Opera). 33cb does not use advertising cookies or retargeting pixels.

5 Data Security Measures

33cb takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. No online platform can guarantee absolute security, but 33cb maintains a security posture consistent with industry best practice for online gaming platforms operating in the Bangladesh market.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data in transit between your device and 33cb servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Password Hashing: Account passwords are stored as one-way cryptographic hashes using bcrypt. Plaintext passwords are never stored or transmitted.
• Access Controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Intrusion Detection: 33cb's infrastructure is monitored continuously for suspicious access patterns, brute-force login attempts, and anomalous data query behaviour.
• Data Backups: Player account data is backed up regularly to geographically separated secure storage to ensure availability in the event of a system failure.

5.2 Organisational Safeguards

• Staff with access to personal data are subject to confidentiality obligations and receive regular training on data protection practices.
• Third-party service providers with access to player data are vetted for data security compliance before engagement and are subject to data processing agreements.
• Internal data access logs are audited periodically to detect any unauthorised or excessive access to player records.

5.3 Data Breach Response

In the event of a data breach that poses a material risk to affected players, 33cb will notify impacted players as promptly as possible via the registered email address on their account. The notification will describe the nature of the breach, the categories of data affected, and the steps 33cb has taken — and recommends players take — to mitigate any potential harm. 33cb will also take immediate remedial action to contain the breach and prevent recurrence.

6 Data Retention

33cb retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention periods applied to the main categories of personal data are outlined below.

When the applicable retention period expires and no overriding legal obligation requires continued storage, personal data is securely deleted or anonymised using industry-standard methods. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

7 Your Privacy Rights

As a registered player on the 33cb platform, you have a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of them, contact the 33cb support team at [email protected] with a clear description of your request. We will respond within 30 days of receiving your request and may ask you to verify your identity before the request is processed.

7.1 Right to Access

You have the right to request a copy of the personal data 33cb holds about you. Upon a verified access request, we will provide a summary of the categories of data held, the purposes for which it is processed, and — where technically feasible — a structured export of the data itself. Access requests are fulfilled free of charge for one request per 12-month period.

7.2 Right to Rectification

If any personal data 33cb holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating a phone number or residential address — can be made directly through your account settings dashboard. Changes to core identity information (full name, date of birth) require submission of supporting identity documents and are processed by the compliance team.

7.3 Right to Erasure

You may request that 33cb delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent on which processing was based, or where the data has been unlawfully processed. The right to erasure does not apply where 33cb is required to retain data to comply with a legal obligation — for example, transaction records subject to anti-money laundering retention requirements. In such cases, we will explain why full erasure is not possible and confirm what data can be deleted.

7.4 Right to Restrict Processing

You have the right to request that 33cb restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection you have raised is being assessed. Where processing is restricted, the data will continue to be stored but will not be actively used until the restriction is lifted.

7.5 Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that it be transferred to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on 33cb's legitimate interests. In particular, you have an unconditional right to object to the use of your personal data for direct marketing purposes, and 33cb will cease such processing immediately upon receiving your objection without requiring you to provide a reason.

8 Policy Updates and Contact

33cb reviews this Privacy Policy periodically and will update it when changes to our data practices, applicable law, or the services we offer make an update necessary. The effective date displayed at the top of this page reflects the date on which the current version came into force.

8.1 Notification of Changes

When material changes are made to this Privacy Policy — changes that affect how your data is used, the categories of data we collect, or the rights available to you — registered players will be notified via email to the address on file. The notification will summarise the key changes and provide a link to the updated policy. Continued use of the 33cb platform after the notification date constitutes acceptance of the updated policy. If you do not agree to the revised policy, you should contact [email protected] to request account closure before the new policy takes effect.

8.2 Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 33cb holds about you, please contact the support team directly. We are committed to addressing all privacy-related enquiries promptly and transparently.

All privacy enquiries should be directed to:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 4 hours for general support; within 30 days for formal data subject access requests
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)