33bk Privacy Policy
At 33bk, your privacy is a core commitment — not a legal formality. This document explains exactly what personal data we collect from players across Bangladesh, how we use it, who we share it with, and what rights you hold over that data.
Introduction
33bk is an internationally licensed online betting and casino platform serving adult players across Bangladesh. We are committed to handling your personal data responsibly, transparently, and in accordance with the data protection standards required under our operating licence and applicable international best practices.
This Privacy Policy applies to all personal data we receive from you — whether you submit it directly during registration or KYC verification, generate it through your activity on the platform, or whether it is automatically collected by our systems when you visit 33bk.io. It applies to all users of the 33bk platform, including registered players, visitors who have not yet registered, and any individual who contacts our support team.
This policy should be read alongside the 33bk Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and 33bk. Together, these documents govern your relationship with the platform.
Categories of Personal Data We Collect
33bk collects the following categories of personal data from users of the platform. We collect only the data that is genuinely necessary for the purposes set out in this policy — we do not collect personal data speculatively or in excess of what our operations require.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number, photograph (from KYC documents) | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, city or region of residence (e.g., Dhaka, Chittagong, Sylhet) | Account registration |
| Financial Data | Mobile banking account reference (bKash, Nagad, Rocket, Upay), transaction IDs, deposit and withdrawal history | Payment processing |
| Technical Data | IP address, device type and model, browser type and version, operating system, time zone (Bangladesh Standard Time, UTC+6) | Automatic collection on site visit |
| Usage Data | Pages visited, session duration, games played, bets placed, bet amounts, game outcomes, bonus claims, responsible gaming tool usage | Ongoing platform activity |
| Communications Data | Content of support emails, live chat transcripts, complaint records | When you contact 33bk support |
| Verification Documents | Copies of national identity card, passport, driving licence, utility bills (address verification), bank or mobile banking statements (source of funds) | KYC and enhanced due diligence |
We do not collect or store full payment card numbers. All financial transactions are processed directly via the relevant mobile banking provider (bKash, Nagad, Rocket, Upay) and we receive only a transaction reference to confirm payment status. We do not process credit card payments and therefore do not hold card data.
How We Collect Your Personal Data
3.1 Directly From You
The majority of personal data we hold is provided directly by you at various points during your use of the 33bk platform. This includes data submitted when you:
- Register a new player account on 33bk.io, including your name, date of birth, email address, and mobile number.
- Complete KYC identity verification by uploading a copy of your national identity card, passport, or other accepted document.
- Make a deposit or submit a withdrawal request via bKash, Nagad, Rocket, or Upay.
- Contact the 33bk support team by email at [email protected] or via any in-platform messaging channel.
- Apply responsible gaming tools such as deposit limits, loss limits, or self-exclusion, which require us to record your preferences and enforce them on your account.
- Participate in promotional offers or competitions where you submit additional information to qualify.
3.2 Automatically Through Your Use of the Platform
When you visit 33bk.io or use the platform, certain technical and usage data is collected automatically by our systems. This includes your IP address, device identifiers, browser configuration, session timestamps, pages visited, and in-platform activity such as bets placed and games launched. This data is collected using standard web server logs and session tracking technologies and is used primarily for platform security, fraud detection, and service improvement purposes.
3.3 From Third-Party Service Providers
In some cases, 33bk receives personal data about you from third-party service providers who support the operation of the platform. This includes identity verification providers who assist with KYC document checks, and fraud screening services that cross-reference submitted data against known fraud indicators. Data received from these providers is used solely in connection with the original purpose for which it was obtained.
How We Use Your Personal Data
33bk uses the personal data we collect for the following purposes. Each use is connected to a specific lawful basis, which is set out in Section 5 of this policy.
- Account management: To create, maintain, and administer your 33bk player account, including processing login authentication and account setting updates.
- Identity and age verification: To confirm that you are who you say you are, that you meet the 21+ age requirement, and that your account is not being used by or on behalf of a third party.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain a complete transaction record for each player account.
- Service delivery: To provide you with access to the 33bk sportsbook, live casino, slots, crash games, and all other platform features available to verified players.
- Responsible gaming compliance: To implement and enforce responsible gaming tools applied to your account, including deposit limits, self-exclusion periods, and cooling-off restrictions.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and other prohibited conduct as defined in the 33bk Terms & Conditions.
- Customer support: To respond to your enquiries, resolve disputes, and manage complaints submitted to the 33bk support team.
- Legal and regulatory compliance: To comply with obligations arising from our operating licence, including anti-money-laundering (AML) requirements, record-keeping obligations, and responses to lawful requests from regulatory or law enforcement authorities.
- Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the 33bk platform.
- Promotional communications: To send you information about bonuses, promotions, and platform updates relevant to your account, where you have not opted out of such communications. You may opt out at any time by contacting [email protected].
Legal Basis for Processing Personal Data
Every use of your personal data by 33bk is grounded in one of the following lawful bases for processing. We process your personal data only where at least one of these bases applies.
| Processing Purpose | Lawful Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to create and maintain your player account |
| KYC identity and age verification | Legal obligation — required under our operating licence and AML obligations |
| Payment processing (deposits and withdrawals) | Performance of contract — necessary to fulfil our payment obligations to you |
| Fraud prevention and security monitoring | Legitimate interest — protecting the integrity of the platform and other players |
| Responsible gaming tool enforcement | Legal obligation and legitimate interest — protecting player welfare |
| Promotional communications | Consent — you may withdraw consent at any time |
| Regulatory reporting and record-keeping | Legal obligation — compliance with licensing and AML requirements |
| Platform analytics and improvement | Legitimate interest — improving service quality using aggregated data |
Data Sharing and Third-Party Disclosure
33bk does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the purpose in question.
6.1 Payment Processing Partners
When you make a deposit or request a withdrawal, the transaction is processed by the relevant mobile banking provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), or Upay (UCB). 33bk shares only the minimum information necessary to complete the transaction, including your registered mobile number and the transaction amount. These providers handle your payment data in accordance with their own privacy policies and are bound by their respective regulatory obligations in Bangladesh.
6.2 Identity Verification and KYC Providers
To fulfil our KYC obligations, 33bk may share identity document data with licensed third-party identity verification service providers. These providers operate under strict data processing agreements that limit their use of your data to the specific verification task and prohibit any secondary use, onward transfer, or retention beyond what is operationally necessary.
6.3 Game and Technology Providers
The casino games and sports betting technology available on 33bk are supplied by certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, JILI, Spribe, and Ezugi. These providers receive technical session data necessary to render and operate their games within the 33bk platform environment. They do not receive your identity documents, financial data, or contact information.
6.4 Legal and Regulatory Disclosure
33bk may be required to disclose your personal data to regulatory authorities, law enforcement agencies, or other government bodies where such disclosure is required by law, court order, or the terms of our operating licence. In such cases, we will disclose only the minimum data required to comply with the applicable legal obligation and will take reasonable steps to notify you of the disclosure unless prohibited from doing so by law.
Cookies and Tracking Technologies
33bk uses cookies and similar tracking technologies on the 33bk.io website to support the operation of the platform, maintain session state for logged-in players, and collect aggregated analytics data. The following types of cookies are used on the platform:
- Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language and display preferences, and ensure that security features such as CSRF protection function correctly. These cookies cannot be disabled without impairing platform functionality.
- Functional cookies: These cookies remember choices you make on the platform — such as your responsible gaming settings and notification preferences — so that you do not need to reset them on each visit.
- Analytics cookies: These cookies collect aggregated, anonymised data about how players use the platform — including which pages are most visited, where users drop off during registration, and how long sessions last. This data is used solely to improve the platform and is never linked back to individual player identities.
- Security cookies: These cookies assist in detecting and preventing fraudulent activity, including multiple-account creation from the same device, bot activity, and unusual login patterns.
33bk does not use advertising or third-party tracking cookies. No data collected via cookies on 33bk.io is shared with advertising networks, social media platforms, or data aggregators.
Data Retention
33bk retains your personal data for the periods set out below, after which it is securely deleted or anonymised. Retention periods are determined by a combination of operational necessity, legal obligation, and the requirements of our operating licence.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and contact data | Duration of active account + 5 years after closure | AML and licensing obligation |
| KYC verification documents | Duration of active account + 5 years after closure | AML regulatory requirement |
| Transaction and financial records | Duration of active account + 5 years after closure | AML and financial record-keeping obligation |
| Betting and gaming activity logs | Duration of active account + 3 years after closure | Dispute resolution and audit |
| Support communications | 3 years from the date of the communication | Dispute resolution and service improvement |
| Technical and usage logs (IP, session) | 12 months from collection | Security and fraud monitoring |
| Self-exclusion records | Permanent (never deleted) | Responsible gaming obligation |
Where an account has been closed due to confirmed fraud, money laundering, or another material breach of the 33bk Terms & Conditions, data may be retained beyond the standard periods set out above for the purpose of preventing re-registration and supporting any ongoing legal proceedings.
Data Security Measures
33bk implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following controls:
- Encryption in transit: All data transmitted between your device and the 33bk platform is encrypted using TLS 1.2 or higher. This applies to login credentials, KYC document uploads, and all financial transaction data.
- Encryption at rest: Sensitive data stored on 33bk servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
- Access control: Access to personal data held by 33bk is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific operational role. All access is logged and periodically reviewed.
- Authentication: Internal systems used to access player data are protected by multi-factor authentication requirements for all staff.
- Vulnerability management: 33bk conducts periodic security assessments of the platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Incident response: 33bk maintains a data breach response procedure. In the event of a confirmed breach that poses a risk to player data, affected players will be notified without undue delay in accordance with our licensing obligations.
Your Data Rights
As a player on the 33bk platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] from the email address registered to your account. We aim to respond to all data rights requests within 30 days of receipt.
- Right of access: You have the right to request a copy of the personal data 33bk holds about you. We will provide this in a clear, structured format within 30 days.
- Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Where possible, you may update basic contact information directly through your account settings.
- Right to erasure: In certain circumstances, you may request that we delete the personal data we hold about you. This right is subject to legal and regulatory exceptions — for example, we are unable to delete transaction records or KYC documentation that we are legally required to retain. Where erasure is not possible in full, we will explain the reason and confirm which data has been deleted.
- Right to restrict processing: You may request that we restrict our processing of your personal data in specific circumstances, such as while a dispute about data accuracy is being resolved.
- Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you provided to 33bk in a structured, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
- Right to object: You may object to processing based on 33bk's legitimate interests — such as platform analytics — where you feel your interests override ours. We will consider and respond to all such objections.
Children and Minors
The 33bk platform is strictly for adults aged 21 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person who does not meet the 21+ age requirement, we will immediately close the relevant account, delete all associated personal data to the extent permitted by our legal obligations, and withhold any balance pending investigation.
If you are a parent or guardian and believe that a person under the age of 21 in your care may have registered a 33bk account, please contact our support team immediately at support@33bk .io. We will investigate and act on all such reports as a matter of priority.
Third-Party Links
The 33bk platform may contain references to third-party services — such as mobile banking providers like bKash and Nagad — that operate their own websites and their own privacy policies. When you leave 33bk.io and interact with a third-party service, the privacy practices of that third party apply to any data you provide to them directly. 33bk has no control over, and accepts no responsibility for, the data handling practices of third-party websites or services.
We recommend that you review the privacy policy of any third-party service you interact with in connection with your use of the 33bk platform — in particular your mobile banking provider — to understand how they handle your personal and financial data.
Changes to This Privacy Policy
33bk reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory obligations. When we make material changes to this policy, we will notify registered players by email to the address on file and will update the "Last Updated" date shown at the top of this document.
Your continued use of the 33bk platform following the notification of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not accept the updated terms, you should discontinue use of the platform and contact [email protected] to request account closure.
Minor clarifications or corrections that do not substantively change how we process your data may be made without prior notification. The current version of this Privacy Policy is always the authoritative version and is available at 33bk.io/privacy-policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 33bk handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our compliance team and will receive a substantive response within 30 days.
Subject line for data requests: "Data Rights Request"
Subject line for general privacy queries: "Privacy Policy Enquiry"
Response time: typically within 1–3 hours for general support; up to 30 days for formal data rights requests (Bangladesh Standard Time, UTC+6).
We are committed to resolving all privacy concerns fairly and promptly. If you feel your concern has not been adequately addressed after contacting us, you retain the right to escalate the matter to the relevant data protection authority under the jurisdiction of our operating licence.
How 33bk Protects Your Privacy
These six principles guide every decision we make about your personal data — from the moment you register to long after your last session.
End-to-End Encryption
Every byte of data between your device and 33bk travels over TLS-encrypted connections. Sensitive stored data — including KYC documents — is encrypted at rest using industry-standard algorithms. Your information is never exposed in plaintext.
Zero Data Sales
33bk does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial gain. Your data exists solely to run your account, process payments, and keep the platform secure — nothing else.
Your Rights, Upheld
Access, correct, export, or delete your data at any time by emailing [email protected]. All requests are handled by our compliance team within 30 days with a substantive written response — no automated dismissals.
Defined Retention Periods
We keep your data only as long as necessary. Transaction and KYC records are retained for five years after account closure as required by AML regulations. Technical logs are deleted within 12 months. Everything else follows a clearly defined schedule.
Minimal Data Sharing
Your data is shared only with the specific providers needed to operate your account — your mobile banking provider for payments, KYC partners for identity checks, and game providers for session rendering. Every sharing arrangement is governed by a data processing agreement.
Breach Notification
In the event of a confirmed data breach affecting your personal information, 33bk will notify you without undue delay in accordance with our licensing obligations. Our incident response programme is tested regularly to ensure rapid, effective action when it matters most.
Privacy Understood. Ready to Play on 33bk?
Now that you know exactly how 33bk handles your data, explore everything the platform has to offer — from live cricket betting and premium slots to 24/7 live casino games. Instant deposits via bKash and Nagad. For adults aged 21 and above only.