Your Privacy Matters to 33hd

1 Introduction

33hd is an online casino and sports betting platform serving players across Bangladesh. We are committed to handling the personal information of all our players with care, integrity, and full transparency. This Policy applies to all personal data we process in connection with the 33hd website, mobile-optimised interface, live chat support system, and any related communications.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and 33hd. Defined terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions. The effective date of this Policy is 1 January 2026. If you have any questions about how we handle your data, please contact our support team at any time via live chat or by email — contact details are set out in Section 14.

2 Personal Data We Collect

Depending on how you interact with the 33hd platform, we may collect and process the following categories of personal data:

We do not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily disclose such information during a responsible gaming assessment, in which case it is processed solely for the purpose of providing appropriate support.

3 How We Collect Your Data

33hd collects your personal data through the following means:

• Direct interactions: Data you provide when creating an account, completing identity verification, making a deposit or withdrawal, placing a bet, contacting support via live chat, or responding to a promotional offer.
• Automated technologies: Technical and usage data collected automatically when you visit 33hd.io, including data gathered via cookies, server logs, and similar tracking technologies (see Section 7 for details).
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) when you make a financial transaction.
• Identity verification providers: Where we use third-party services to assist with verification of your national ID or other identity documents, those providers may return verified data to us.
• Game providers: Summary data about game sessions and outcomes received from licensed game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, for the purpose of transaction reconciliation and dispute resolution.
• Fraud prevention services: Data received from third-party risk and fraud detection systems to help us identify and prevent fraudulent account activity.

4 How We Use Your Personal Data

33hd uses your personal data only for clearly defined and legitimate purposes. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

We will never use your personal data for purposes that are incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

For each purpose described in Section 4, 33hd relies on one or more of the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your player account, process transactions, and deliver the games and services you have requested.
• Legitimate interests: Processing in our legitimate business interests, including fraud prevention, platform security, responsible gaming compliance, and improving our services — provided those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and any other legal duties to which 33hd is subject.
• Consent: Where processing is based solely on your consent — for example, sending you marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing, contact support via live chat or email.

6 Sharing Your Personal Data

33hd does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banking institutions, for the sole purpose of processing your financial transactions.
• Game providers: Licensed studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, to the extent required for game delivery and session reconciliation.
• Identity verification providers: Third-party KYC and AML compliance services used to verify player identity and age.
• Fraud and security services: Risk management and fraud detection providers who assist us in keeping the platform safe and secure for all players.
• Cloud and infrastructure providers: Hosting and cloud infrastructure partners who store and process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where we are required by law or a valid legal process to disclose your data to a government body, law enforcement agency, or court of competent jurisdiction.

All third-party data processors engaged by 33hd are bound by contractual data protection obligations consistent with this Policy. We conduct due diligence on all processors before engagement and review those arrangements periodically.

7 Cookies & Tracking Technologies

33hd uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The types of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language selection (English), preferred game categories, and responsible gaming settings you have activated.
• Analytics cookies: Collect anonymised data about how players use the platform — pages visited, games played, session duration — to help us improve performance and user experience. No personally identifiable information is included in analytics data.
• Security cookies: Help us detect and prevent fraudulent sessions, bot activity, and unauthorised access attempts.

33hd does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences via your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 33hd platform.

8 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes. The following general retention periods apply:

• Active account data: Retained for the duration of your account plus a minimum of 5 years after account closure, in order to satisfy AML and KYC obligations.
• Transaction and betting records: Retained for 7 years following the date of each transaction, as required for financial record-keeping.
• Identity verification documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your consent plus 3 years after withdrawal, as evidence of lawful processing.
• Technical and usage data (cookies/logs): Typically retained for 13 months, after which it is aggregated or deleted.

When personal data is no longer required, it is securely deleted or irreversibly anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and research purposes.

9 Data Security

33hd implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 33hd platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial details.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular penetration testing and independent security audits of the platform infrastructure.
• Two-factor authentication (2FA) options available to all registered players for additional account security.
• Intrusion detection systems and real-time monitoring of platform activity to identify and respond to threats promptly.
• Staff training on data protection and security best practices, with mandatory annual refresher programmes.

While 33hd takes all reasonable steps to protect your data, no system is entirely immune to risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you promptly in accordance with applicable legal requirements.

10 Your Data Rights

As a 33hd player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat (24/7, average response 2–5 minutes) or by email at [email protected]:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that override this right.
• Right to restrict processing: You may request that we limit how we use your data while a complaint or correction request is being assessed.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on our legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We will respond to all verified data rights requests within 30 days. In complex cases, we may extend this to 60 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

11 Children & Minors

33hd operates a strict minimum age policy. The platform is not intended for, and must not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately suspend the relevant account, delete all associated data, and reverse any transactions to the extent possible. Any winnings accumulated by an underage player will be forfeited in full.

Parents and guardians who have reason to believe their child has accessed 33hd should contact our support team immediately via live chat so that the matter can be addressed without delay. 33hd also supports the use of parental control software as an additional layer of protection.

12 Third-Party Links

The 33hd platform may contain references to game providers and payment partners by name. Where game interfaces are delivered by third-party studios (such as Pragmatic Play, Evolution Gaming, or Spribe), those environments are governed by the respective provider's own privacy policies and security practices, over which 33hd has no direct control.

We recommend reviewing the privacy policies of any third-party services you interact with. 33hd is not responsible for the privacy practices or content of third-party platforms. The inclusion of a third-party game or payment provider on 33hd does not constitute an endorsement of that provider's privacy practices beyond what is stipulated in our data processing agreements with them.

13 Changes to This Privacy Policy

33hd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:

• Post the updated Policy on this page with a new effective date clearly displayed at the top;
• Display a prominent notice on the 33hd platform informing players that the Policy has been updated;
• Where possible and where the change is significant, send a notification to your registered mobile number or email address.

Your continued use of the 33hd platform after any Policy update constitutes your acceptance of the revised terms. If you do not agree with a material change, you should stop using the platform and may request account closure by contacting our support team. We encourage you to review this page periodically to stay informed about how we protect your data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 33hd handles your personal data, please reach out to us using the following contact details:

• Live Chat: Available 24/7 via your account dashboard — average response time 2–5 minutes. This is the fastest way to reach our data protection team for urgent requests.
• Email: [email protected] — please use the subject line "Privacy Request" for data-rights related enquiries. Average response time 2–6 hours.

Email addresses above are displayed as plain text and are not clickable links. Please copy the address and paste it into your email client. We aim to acknowledge all privacy-related contacts within 24 hours and to provide a substantive response within 30 days.