Privacy Policy — How bd33k Protects Your Data

Introduction

This Privacy Policy ("Policy") is published by bd33k ("we", "us", "our", "Platform") and applies to all individuals who access, register with, or use the bd33k online gaming and sports betting platform, available at bd33k.io and any related mobile interfaces or associated services operated by bd33k.

This Policy explains what personal data bd33k collects about you, the legal basis on which we process that data , how we use it, who we may share it with, how long we keep it, and what rights you have in relation to it. Please read this Policy carefully before using the bd33k platform. Your use of the platform constitutes your acknowledgement that you have read and understood this Policy.

This Policy should be read alongside bd33k's Terms and Conditions and Responsible Gaming Policy, both of which are published on this website and form part of the overall framework governing your relationship with bd33k.

Personal Data We Collect

bd33k collects the following categories of personal data in the course of providing its services to players based in Bangladesh and elsewhere.

2.1 Account Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Residential address, including city, district, and postal code
• Mobile phone number registered in Bangladesh
• Email address used for account communications
• Username and encrypted password created at registration

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of your National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)
• Mobile banking account confirmation from bKash, Nagad, Rocket, or other registered payment methods
• Selfie photograph or video where required for enhanced verification

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (BDT) and timestamps
• Payment method details including mobile banking account references (bKash, Nagad, Rocket, Upay) and masked bank card numbers
• Account balance history and bonus credit records
• Transaction reference numbers provided by third-party payment processors

2.4 Gaming Activity Data

• Game sessions played, including game titles, providers, stakes, and outcomes
• Sports bets placed, including markets, selections, odds, and settlement results
• Session duration, login timestamps, and platform interaction patterns
• Responsible gaming tool usage, including deposit limits and self-exclusion requests

2.5 Technical and Device Data

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Referral source data where you arrived at bd33k via a tracked link

2.6 Communication Data

• Contents of support tickets, live chat transcripts, and email correspondence with bd33k
• Survey responses and feedback submissions where voluntarily provided
• Records of promotional opt-ins and marketing preferences

How We Collect Your Data

bd33k collects personal data through the following channels and mechanisms:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawals, contact our support team, or respond to surveys.
• Automatically during your use of the platform — through cookies, server logs, and similar tracking technologies that record your interactions with the website and games.
• From payment service providers — transaction confirmation data passed back to bd33k from bKash, Nagad, Rocket, Upay, and banking partners when you make a deposit or withdrawal.
• From identity verification partners — confirmation results returned by KYC service providers following document checks.
• From game providers — session data returned by Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other integrated providers in relation to your game activity on their platforms.
• From fraud prevention and analytics services — risk signals and device fingerprint data used to protect the platform and its players from fraudulent activity.

How We Use Your Personal Data

bd33k uses the personal data we collect for the following purposes. We do not use your data for any purpose that is incompatible with what is stated here without first obtaining your consent or otherwise having a clear legal basis to do so.

Legal Basis for Processing Your Data

bd33k processes your personal data on one or more of the following legal bases depending on the specific processing activity in question:

• Contractual necessity — processing required to perform our obligations under our Terms and Conditions, such as account creation, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable legal requirements, including age verification, anti-money laundering (AML) checks, and fraud prevention obligations.
• Legitimate interests — processing carried out for our legitimate business interests, such as fraud detection, platform security, and improving the quality of our services, provided those interests are not overridden by your rights.
• Consent — processing activities for which we rely on your freely given, specific, informed, and unambiguous consent, primarily in relation to marketing communications and certain non-essential cookies. You may withdraw consent at any time without detriment to your account.

Sharing Your Personal Data

bd33k does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

6.1 Payment Service Providers

To process deposits and withdrawals, bd33k shares necessary financial and identity data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers process data solely in connection with your transaction and are bound by their own privacy and security obligations.

6.2 Identity Verification Partners

bd33k uses regulated third-party KYC service providers to verify the identity documents submitted by players. These providers receive only the documents and data necessary to conduct the verification check and are prohibited from using that data for any other purpose.

6.3 Game Providers

When you access a game hosted by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, limited session and account data is passed to that provider to enable the game session. Game providers are contractually bound to process this data only for the purpose of delivering the game.

6.4 Fraud Prevention and Security Services

bd33k uses specialist fraud detection and platform security services that may process device fingerprint data, IP addresses, and behavioural signals. These services help us protect the platform and its players from unauthorised access, account takeover, and financial fraud.

6.5 Legal and Regulatory Disclosure

bd33k may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, where disclosure is necessary to establish, exercise, or defend legal rights, or where disclosure is required to prevent serious harm or illegal activity.

Cookies and Tracking Technologies

bd33k uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, analyse usage patterns, and (where you have consented) deliver relevant promotional content. The following categories of cookies may be set when you use the bd33k platform:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or functional cookies may impair the operation of the bd33k platform and prevent you from accessing certain features.

Data Retention

bd33k retains personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention principles apply:

• Active account data — retained for the full duration of your account relationship with bd33k, plus a minimum of five years following account closure to meet anti-money laundering and financial record-keeping obligations.
• KYC and identity documents — retained for a minimum of five years following the end of the customer relationship, in line with standard financial services compliance requirements.
• Transaction records — retained for a minimum of five years following each transaction for financial audit and regulatory compliance purposes.
• Support communications — retained for two years following resolution of the relevant support case, unless the communication relates to a dispute or legal claim in which case it is retained for the duration of that matter plus two years.
• Marketing preferences and consent records — retained for the duration of your consent or until you withdraw it, plus a reasonable period thereafter to demonstrate compliance.
• Technical and analytics data — retained in anonymised or aggregated form for up to two years for platform improvement purposes.

At the end of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

Data Security

bd33k implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the bd33k platform
• Encryption of sensitive data at rest within our database infrastructure
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for platform administrator access
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures including defined timelines for investigating and responding to data security incidents
• Employee training on data protection responsibilities and secure data handling practices

While bd33k takes data security seriously and maintains robust protections, no system connected to the internet can be guaranteed as completely secure. You play an important role in keeping your account safe by using a strong, unique password for your bd33k account and by reporting any suspected unauthorised access to our support team promptly.

Your Rights Over Your Personal Data

Subject to applicable data protection law, you have the following rights in relation to the personal data bd33k holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 calendar days in most cases.

10.1 Right of Access

You have the right to request a copy of the personal data bd33k holds about you, along with information about how it is being used. This is sometimes referred to as a "Subject Access Request" (SAR). We will provide this information in a clear, structured format at no charge.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your bd33k account settings.

10.3 Right to Erasure

You may request that bd33k delete the personal data we hold about you in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and there is no other legal basis for processing. Please note that this right is subject to legal retention requirements; we may be unable to delete certain data where we have a legal obligation to retain it.

10.4 Right to Restriction of Processing

In certain circumstances, you may request that bd33k restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified. During a restriction period, bd33k will continue to store your data but will not actively process it beyond storage.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another service provider where technically feasible.

10.6 Right to Object

You have the right to object to the processing of your personal data where bd33k relies on legitimate interests as the legal basis for that processing. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.

10.7 Rights Related to Automated Decision-Making

Where bd33k makes decisions about you using solely automated processing that produce significant effects — for example, automated account suspension triggered by fraud detection systems — you have the right to request human review of that decision and to contest the outcome.

Children and Minors

The bd33k platform is strictly for individuals aged 21 years and above. bd33k does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by or on behalf of an individual who is under 21, we will take immediate steps to suspend the associated account and securely delete the data collected.

If you are a parent or guardian and you believe that a person under 21 has registered an account with bd33k, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Third-Party Links and Embedded Content

The bd33k platform may contain links to third-party websites, or may embed content served from third-party game providers' infrastructure. This Privacy Policy applies solely to data collected and processed by bd33k. Third-party websites and services have their own privacy policies, and bd33k accepts no responsibility for the privacy practices or data handling of any third party.

We encourage you to review the privacy policies of any third-party service you access in connection with your use of the bd33k platform, including payment service providers and game studios whose products are available through our lobby.

Changes to This Privacy Policy

bd33k reserves the right to update or revise this Privacy Policy at any time. When we make material changes — meaning changes that significantly affect how we collect, use, or share personal data — we will notify registered players by email to the address associated with their account, or through a prominent notice displayed on the bd33k platform, at least seven days before those changes come into effect.

The date of the most recent revision is always shown at the top of this page. We recommend that you review this Policy periodically to stay informed about how bd33k protects your privacy. Your continued use of the platform after a revised Policy has come into effect constitutes your acknowledgement of the updated terms.

Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bd33k has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: use "Privacy Request" or "Data Enquiry" for fastest routing
• Response target: within 30 calendar days for formal data subject requests; within 5 business days for general privacy enquiries
• Support language: English
• Support availability: 24 hours a day, 7 days a week

This Privacy Policy was last reviewed and updated in January 2026. bd33k is committed to maintaining this document as an accurate and current reflection of our data practices at all times.