Privacy Policy — How 33dk Handles Your Personal Data

33dk is Bangladesh's leading online sports betting and casino platform. In the course of providing our services — which include sports wagering, live in-play betting, live casino, slots, crash games, and related entertainment — we inevitably collect and process personal data about the players who use our platform.

This Privacy Policy applies to all personal data collected through the 33dk website, any associated mobile interface, and all communications between you and 33dk including support interactions, promotional correspondence, and account notifications. It applies to all registered players and to any visitor who browses the platform without registering an account.

This policy should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy, which together form the complete agreement between you and 33dk. In the event of any conflict between this policy and the Terms & Conditions, the Terms & Conditions shall prevail unless this policy explicitly states otherwise.

33dk is committed to handling personal data with integrity, transparency, and appropriate security. We do not treat privacy compliance as a box-ticking exercise — it is a genuine operational commitment that informs how we build and maintain our platform.

33dk collects personal data in two broad categories: information you provide directly to us, and information we collect automatically through your use of the platform.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other), email address, and contact number.
• Identity verification (KYC) documents: Copies of government-issued photo identification (National ID card or passport), proof of address documents, and payment method verification materials submitted in connection with account verification.
• Financial transaction data: Deposit and withdrawal amounts, transaction timestamps, payment method identifiers (such as the registered bKash or Nagad account number), and transaction reference numbers. Full payment credentials are processed by the payment provider and are not stored on 33dk's servers.
• Support communications: The content of messages, emails, or chat conversations you initiate with the 33dk support team, together with the contact details you provide in those communications.
• Preference and profile data: Game preferences, favourite markets, deposit limit settings, responsible gaming tool configurations, and any other profile information you voluntarily add to your account.

Information we collect automatically:

• Technical and device data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, features accessed, betting and gaming activity records, session duration, click paths, and search queries entered within the platform.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 6 of this policy.
• Fraud prevention data: Behavioural signals and pattern data collected by our fraud detection systems for the purpose of protecting the integrity of the platform and detecting unauthorised account access.

33dk uses personal data collected from players for the following purposes. The table below maps each use to its primary legal basis (see Section 4 for detail on legal bases).

33dk will not use your personal data for any purpose that is materially different from those listed above without first notifying you and, where required, obtaining your consent.

33dk processes personal data on one or more of the following legal bases:

• Contract performance: Processing is necessary to fulfil the agreement between you and 33dk — for example, to operate your account, process your transactions, and deliver the services you have requested.
• Legal obligation: Processing is required to comply with applicable law, including identity verification requirements, anti-money laundering obligations, and responsible gaming mandates.
• Legitimate interests: Processing is necessary for 33dk's legitimate business interests, such as fraud prevention, platform security, and platform analytics, provided those interests are not overridden by your rights and interests.
• Consent: Where processing is not covered by the bases above — for example, sending you promotional communications about bonuses and new games — we will ask for your explicit consent and will provide a straightforward means to withdraw that consent at any time.

33dk does not sell, rent, or trade your personal data to any third party. We share personal data with external parties only in the following limited and specific circumstances:

• Payment processors: To facilitate deposits and withdrawals, necessary financial transaction data is shared with payment service providers including bKash, Nagad, Rocket, and Upay, and with partner banks including Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, and others, as required to complete your transaction. These providers are contractually bound to handle your data securely and to use it only for the purpose of processing the transaction.
• Identity verification providers: To fulfil KYC obligations, identity document data may be shared with specialist third-party verification service providers. All such providers are bound by strict data processing agreements.
• Game software providers: Session data is necessarily shared with third-party game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in order to deliver their games and process game outcomes. These providers are responsible for their own data processing within the game environment.
• Fraud prevention and security partners: Device and behavioural data may be shared with specialist fraud detection platforms to identify and prevent fraudulent activity, account takeovers, and money laundering.
• Legal and regulatory disclosure: 33dk may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or legal process, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of 33dk, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 33dk's assets, personal data held about players may be transferred to the acquiring entity. You will be notified of any such transfer and of any consequential changes to this Privacy Policy.

33dk uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain session state, improve user experience, and gather analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. They maintain your login session, store your shopping cart state, and enable security features. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limit displays to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where users drop off, and how features are used. This data is used to improve platform design and performance.
• Fraud detection cookies: Collect device fingerprint and behavioural data to identify unusual patterns that may indicate fraudulent account activity or unauthorised access attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. 33dk does not use third-party advertising cookies or retargeting pixels.

33dk implements a layered approach to data security designed to protect personal information against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and 33dk's servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when using the platform.
• Encryption at rest: Sensitive data fields stored in our databases — including identity document references and financial data — are encrypted using industry-standard algorithms.
• Access controls: Access to personal data within 33dk's systems is restricted on a strict need-to-know basis. Staff are granted the minimum access level required to perform their role, and all access is logged and auditable.
• Two-factor authentication: 33dk supports and encourages the use of two-factor authentication (2FA) on player accounts to reduce the risk of unauthorised access resulting from credential compromise.
• Security monitoring: 33dk's systems are monitored continuously for signs of unauthorised access, unusual activity, and potential security incidents. Our security team operates around the clock.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 33dk will notify affected players without undue delay, providing details of the nature of the breach and the steps we are taking to address it.

While 33dk takes all reasonable and practical steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own account — use a strong, unique password and enable 2FA where possible.

33dk retains personal data for as long as is necessary to fulfil the purposes described in this policy, or for the period required by applicable law, whichever is longer. The following retention guidelines apply:

• Active account data: Retained for the duration of the account's active status plus a period of up to 5 years following account closure, to satisfy legal, regulatory, and audit obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification completion, in line with applicable anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of each transaction to support audit, dispute resolution, and regulatory reporting obligations.
• Support communications: Retained for up to 3 years from the date of the interaction, to support quality review, dispute resolution, and training purposes.
• Analytics and usage data: Aggregated and anonymised analytics data may be retained indefinitely. Individually identifiable usage logs are retained for up to 24 months.
• Responsible gaming records: Self-exclusion, cooling-off, and deposit limit records are retained for the duration of the measure plus 5 years, to prevent circumvention of self-imposed restrictions.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

As a player whose personal data is processed by 33dk, you hold the following rights in relation to that data. To exercise any of these rights, please contact the support team using the details in Section 13.

• Right of access: You may request a copy of the personal data that 33dk holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most account details directly from within your account settings.
• Right to erasure: In certain circumstances, you may request that 33dk delete your personal data. This right is subject to limitations where retention is required by law or is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You may request that 33dk restrict the processing of your personal data in specific circumstances, for example while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection. 33dk will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

33dk's platform is strictly for adults aged 21 years and older. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not use the 33dk platform, register an account, or provide any personal information to us.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and void any associated balances. If you are a parent or guardian and believe that a person under 21 in your care has provided personal data to 33dk, please contact our support team immediately at [email protected] (plain text — not a clickable link).

33dk employs age-verification procedures as part of its registration and KYC processes to detect and prevent underage access. We also support the use of parental control software for households where minors may have access to internet-connected devices.

The 33dk platform may contain references to or integrations with third-party services, including game studio interfaces operated by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. When you interact with a game provided by a third-party studio, that studio's own privacy practices apply within the game environment.

33dk is not responsible for the privacy practices of third-party game studios or any other external services you may access in connection with your use of the platform. We recommend reviewing the privacy policy of any third-party service you interact with. 33dk does not endorse, and is not responsible for, the content or data practices of any third-party service provider beyond the scope of our contractual data processing agreements with them.

33dk may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When we do so, we will revise the effective date displayed at the top of this page. For changes that materially affect how your personal data is used — for example, a new purpose for processing or a new category of third-party recipient — we will provide advance notice to registered players via their account contact details before the change takes effect.

Continued use of the 33dk platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any update to this policy, you should cease using the platform and may request closure of your account through the support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the 33dk data support team through the following channels:

• Email: [email protected] (plain text only — not a clickable link; copy the address directly into your email client)
• Live Chat: Available 24 hours a day, 7 days a week from your account dashboard after logging in.
• WhatsApp Support: Available after login — see the account support panel for connection details.

When submitting a data rights request, please include your full registered name and the email address associated with your 33dk account so we can locate your records promptly. 33dk may need to verify your identity before processing the request, to ensure that personal data is not disclosed to an unauthorised party.

For general platform questions and common queries, please visit the FAQ page before contacting support — many common topics are addressed there in full.