bde33 Privacy Policy

1. Introduction

bde33 ("bde33", "we", "us", "our") operates the online casino and sports betting platform accessible at bde33.io (the "Platform"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy describes our practices in relation to the collection, storage, use, disclosure, and protection of personal data in connection with your use of the bde33 Platform.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. If you have any questions about how we handle your data, please contact us at [email protected] before using the Platform.

bde33 is operated primarily for players based in Bangladesh. All natural-language content on the Platform, including this Privacy Policy, is published in English. By using the Platform, you confirm that you are at least 21 years of age and that you have the legal capacity to consent to the processing of your personal data.

2. Data Controller

For the purposes of applicable data protection law, bde33 is the data controller responsible for your personal information. As data controller, bde33 determines the purposes and means by which your personal data is processed. All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our data protection contact at:

• Email: [email protected] (plain text — not a clickable link)
• Platform: bde33.io
• Response Language: English
• Response Time: Within 30 days of receiving a verified request

3. Data We Collect

3.1 Registration Data

When you create a bde33 account, we collect the following information: full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), email address, and mobile phone number. This information is required to create your account and verify your identity.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") verification obligations, we may collect copies of government-issued identification documents (such as a National ID card or passport), proof of residential address (such as a utility bill or bank statement), and proof of payment method ownership. These documents are processed securely and retained only for as long as required by applicable law.

3.3 Financial Data

We collect information related to your transactions on the Platform, including deposit amounts, withdrawal requests, transaction timestamps, payment method types (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction reference numbers. We do not store full payment account credentials; payment processing is handled by our trusted payment partners.

3.4 Gameplay and Betting Data

We collect records of your gameplay activity, including games played, bets placed, amounts wagered, outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform optimisation.

3.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, device type, operating system, screen resolution, referring URL, and session activity logs. This data is used for security monitoring, fraud detection, and platform performance analysis.

3.6 Communications Data

If you contact our support team by email or live chat, we retain records of those communications, including your name, contact details, the content of messages, and any attachments. This data is used to resolve your query and to improve our customer support services.

3.7 Voluntary Data

You may choose to provide additional information voluntarily, such as feedback, survey responses, or promotional opt-ins. Providing this information is optional and will not affect your ability to use the Platform.

4. How We Collect Data

bde33 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies as you navigate the Platform. See Section 8 (Cookies & Tracking) for full details.
• From third parties: From payment service providers (bKash, Nagad, Rocket, Upay, etc.) to confirm transaction details; from identity verification services to validate KYC documents; from fraud-prevention partners to assess risk signals associated with your account activity.

5. How We Use Your Data

bde33 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, KYC data
Identity verification and fraud prevention	KYC data, technical data, financial data
Processing deposits and withdrawals	Financial data, registration data
Providing casino games and sports betting	Gameplay data, account data
Responsible gaming monitoring	Gameplay data, financial data, session data
Customer support	Communications data, registration data
Promotional communications (where opted in)	Registration data, gameplay preferences
Platform security and technical operations	Technical data, session logs
Legal and regulatory compliance	All categories as required

bde33 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by fraud-prevention or anti-money-laundering obligations.

6. Legal Basis for Processing

bde33 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, KYC requirements, and financial record-keeping requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of optional promotional communications. You may withdraw this consent at any time by updating your communication preferences in your account dashboard or by contacting support.

7. Data Sharing and Disclosure

7.1 Service Partners

bde33 shares personal data with carefully selected service partners who assist in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay and affiliated bank partners), game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), identity verification services, customer support technology providers, and cloud infrastructure providers. Each partner is bound by a data processing agreement that restricts their use of your data to the specific services they provide to bde33.

7.2 Legal and Regulatory Disclosure

bde33 may disclose your personal data where required to do so by applicable law, court order, or lawful request from a government or regulatory authority. We will only disclose the minimum information necessary to comply with such a requirement and, where legally permissible, will notify you of the disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bde33's business assets, your personal data may be transferred to a successor entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

7.4 No Sale of Data

bde33 does not sell, rent, or otherwise commercialise your personal data to any third party for their own independent marketing or advertising purposes. This commitment applies unconditionally and is not subject to any opt-out mechanism — it simply does not happen.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by the bde33 Platform when you visit. They allow the Platform to recognise your device, maintain your session, remember your preferences, and collect usage analytics. Similar technologies include web beacons, pixel tags, and local storage objects.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language settings and display options to personalise your experience. Disabling these may reduce Platform convenience.
• Analytics Cookies: Collect anonymised or aggregated data about how users navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely for internal Platform improvement.
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats.

8.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies vary by browser; refer to your browser's help documentation for guidance. bde33 does not currently respond to browser-level "Do Not Track" signals, as no industry standard for such signals has been established.

9. Data Retention

bde33 retains your personal data for the following periods, unless a longer retention period is required or permitted by applicable law:

• Account data: Retained for the duration of your account and for a period of 5 years following account closure, to comply with financial record-keeping and AML obligations.
• KYC documents: Retained for a minimum of 5 years from the date of the last transaction on the account, or longer if required by applicable law.
• Transaction records: Retained for 5 years from the date of the transaction.
• Support communications: Retained for 2 years from the date of the final communication in each support interaction.
• Technical and session logs: Retained for up to 12 months, after which they are aggregated or deleted.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter for compliance audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

10. Data Security

bde33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields (including identity document scans and payment details) at rest using AES-256 encryption.
• Role-based access controls that restrict employee access to personal data to only those with a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments of the Platform infrastructure.
• Firewall protection and intrusion detection systems monitoring Platform traffic 24/7.
• Secure data centres with physical access controls and redundant backup systems.
• Staff training on data protection obligations and information security best practices.

While bde33 employs robust security measures, no data transmission over the internet or electronic storage system is completely immune to risk. You are responsible for maintaining the confidentiality of your account password and for ensuring that your device is protected against unauthorised access. If you suspect your account has been compromised, contact [email protected] immediately.

11. Your Data Rights

Subject to applicable law and certain legal exceptions, you have the following rights in relation to your personal data held by bde33:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Some corrections can be made directly within your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of data we hold.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose without delay.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request. We may ask you to verify your identity before processing your request to protect your data against unauthorised access.

12. Minors and Age Restriction

The bde33 Platform is strictly restricted to individuals who are 21 years of age or older. bde33 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. If we become aware that personal data from a person under 21 has been collected, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the bde33 Platform or provided personal data without your consent, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13. International Data Transfers

bde33 operates primarily for the Bangladesh market and stores the majority of player data on servers located in data centres serving the Asia-Pacific region. In some circumstances, personal data may be transferred to and processed by service partners operating in other countries, including countries whose data protection laws may differ from those applicable in Bangladesh.

Where such transfers occur, bde33 takes appropriate steps to ensure that your personal data continues to be protected to an equivalent standard. These steps include entering into data processing agreements with standard contractual clauses, conducting transfer impact assessments where relevant, and selecting partners who maintain internationally recognised security certifications.

14. Changes to This Privacy Policy

bde33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will notify registered players via the email address on file and by posting a prominent notice on the Platform. The updated Privacy Policy will take effect from the date stated in the notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the bde33 Platform following the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the changes, you must discontinue using the Platform and may request account closure by contacting support.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the bde33 data protection team using the details below. Our support team is available 24 hours a day, 7 days a week:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries
• Language: English
• Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

For responsible gaming concerns, self-exclusion requests, or account closure, please also visit our Responsible Gaming page or our FAQ page for step-by-step guidance.