33bad Privacy Policy

This Privacy Policy applies to all personal data collected by 33bad in connection with the operation of its online betting and casino platform at https://33bad.io (the "Platform"). It covers data collected through your use of the website, mobile-optimised browser experience, and any communications you have with the 33bad support team.

33bad is committed to handling your personal information with transparency and care. We process personal data only for the specific, lawful purposes described in this policy, and we apply appropriate technical and organisational measures to protect that data against unauthorised access, loss, or disclosure at all times.

This policy should be read together with the 33bad Terms & Conditions. Capitalised terms used but not defined in this policy have the meanings given to them in the Terms & Conditions. In the event of any conflict between this policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency, except in matters governed exclusively by data protection law.

33bad collects personal data in the following categories. The specific data points collected in each category are set out in the table below.

We collect only the data that is strictly necessary for the purposes described in this policy. We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless you voluntarily provide such information in a support communication.

33bad processes your personal data for the following specific purposes:

• Account creation and management — to register your 33bad account, verify your identity, manage your account settings, and maintain accurate records of your activity on the platform.
• Transaction processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain a complete and accurate financial record of all transactions associated with your account.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and any other conduct that violates the 33bad Terms & Conditions or applicable law.
• Responsible gaming monitoring — to monitor your gaming behaviour for indicators of problem gambling and to apply any responsible gaming controls you have requested, including deposit limits, cool-off periods, and self-exclusion.
• Legal compliance — to fulfil our obligations under applicable anti-money-laundering, know-your-customer, and data protection regulations, and to respond to lawful requests from regulatory or law enforcement authorities.
• Customer support — to respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement — to analyse aggregated, anonymised usage data to improve the performance, security, and user experience of the 33bad platform.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, where you have given your consent to receive such communications. You may withdraw this consent at any time.

33bad does not use your personal data for automated individual decision-making that produces significant legal effects, except where strictly required by law or where you have given explicit consent.

33bad processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing is necessary to perform the contract between you and 33bad (i.e., to operate your account, process your bets, and pay out winnings).
• Legal obligation — processing is necessary to comply with applicable laws and regulations, including anti-money-laundering requirements, know-your-customer obligations, and data retention mandates.
• Legitimate interests — processing is necessary for the legitimate interests pursued by 33bad, including fraud prevention, platform security, and improving the user experience, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — where no other legal basis applies and where we have asked for and received your explicit consent, such as for the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

33bad does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients strictly as necessary to operate the platform and to comply with our legal obligations:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data required to process your deposit or withdrawal transaction.
• Identity verification providers — third-party KYC and document verification services receive copies of your identity documents solely for the purpose of verifying your identity as required by our know-your-customer procedures.
• Game content providers — licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and wagering data necessary to facilitate gameplay. These providers do not receive your full personal profile.
• Regulatory and law enforcement authorities — we may disclose your data to competent authorities where required by law, court order, or to protect the rights, property, or safety of 33bad, its players, or the public.
• Professional advisers — our legal counsel, accountants, and auditors may access relevant data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third-party service providers that process personal data on our behalf are required to enter into a data processing agreement with 33bad, obligating them to process data only on our documented instructions and to implement appropriate security measures.

The 33bad platform uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, and analyse how players use the site. The following categories of cookies are in use:

• Strictly necessary cookies — essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies — used to remember your preferences such as language settings, display options, and responsible gaming controls you have set on your account.
• Analytics cookies — used to collect aggregated, anonymised information about how visitors interact with the platform so that we can identify areas for improvement. No personally identifiable data is transmitted via analytics cookies.
• Marketing cookies — used to serve relevant promotional content to players who have consented to receive marketing communications. These cookies do not track your activity outside the 33bad platform.

You may control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the 33bad platform. Strictly necessary cookies are exempt from consent requirements and will remain active regardless of your browser cookie settings.

33bad retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable law. The following retention periods apply:

• Account and identity data — retained for a minimum of five (5) years following account closure to comply with anti-money-laundering and know-your-customer legal requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial record-keeping regulations.
• Customer support communications — retained for two (2) years from the date of the communication, or for the duration of any ongoing dispute, whichever is longer.
• Marketing consent records — retained for the duration of your consent and for one (1) year thereafter as evidence of the consent you provided.
• Usage and technical logs — retained for thirteen (13) months for security analysis and fraud detection purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

33bad implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields — including payment account numbers and identity document references — at rest in our databases.
• Role-based access controls that limit access to personal data to only those employees and contractors who require it to perform their specific job functions.
• Regular security audits and vulnerability assessments of our platform infrastructure.
• Multi-factor authentication requirements for all staff with access to production systems containing personal data.
• Incident response procedures that include prompt notification to affected players in the event of a data breach that is likely to result in a risk to their rights and freedoms.

While 33bad takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Subject to applicable law, you have the following rights in relation to your personal data held by 33bad. To exercise any of these rights, please submit a written request to [email protected] from the email address registered on your 33bad account.

The 33bad platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain any personal data from individuals under the age of 21. If we become aware that a person under the age of 21 has registered an account or provided personal data through the platform, we will take immediate steps to close the account, delete all associated data, and reverse any financial transactions, in accordance with our responsible gaming obligations.

If you are a parent or guardian and you believe that a minor in your care has accessed the 33bad platform or provided us with personal information, please contact us immediately at [email protected]. We will investigate and act on all such reports without delay.

The 33bad platform may contain references to third-party services such as payment providers and game content studios. Where you interact directly with a third-party service provider's interface — for example, when completing a bKash or Nagad payment via that provider's own application or website — you are subject to that provider's own privacy policy and data handling practices.

33bad is not responsible for the privacy practices of any third-party service provider and cannot accept liability for how those parties handle your data. We encourage you to review the privacy policies of any third-party service you use in connection with your 33bad account.

33bad reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made, we will notify registered players via the email address associated with their account at least seven (7) days before the revised policy takes effect.

The most current version of this Privacy Policy will always be available at https://33bad.io/privacy-policy. The effective date at the top of this document indicates when the current version entered into force. Your continued use of the 33bad platform following the effective date of any update constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 33bad processes your personal data, please contact our support team. All privacy-related enquiries are handled with strict confidentiality.

Email: [email protected] (plain text — not a clickable link)

Please include your registered username, the email address associated with your account, and a clear description of your query or request. For data rights requests, also specify which right you wish to exercise and provide any details that will help us locate your data accurately. We aim to acknowledge all privacy enquiries within two (2) business days (Bangladesh Standard Time, UTC+6).