33bad Privacy Policy — Your Data, Explained Clearly

1. Introduction & Scope

This Privacy Policy ("Policy") describes the data processing practices of 33bad ("33bad", "we", "us", "our"), the operator of the online gaming platform located at https://33bad.net and any associated mobile interfaces or subdomains. The Policy governs the personal data of all individuals ("Player", "User", "you") who visit, register on, or otherwise interact with the 33bad platform, regardless of whether they are located in Bangladesh or any other jurisdiction from which access is permitted.

By accessing the 33bad platform or creating a player account, you acknowledge that you have read and understood this Policy in full and that you consent to the collection, use, storage, and disclosure of your personal data in the manner described herein. If you do not agree with any aspect of this Policy, you should cease using the 33bad platform and may request account closure by contacting [email protected].

This Policy should be read alongside 33bad's Terms & Conditions and Responsible Gaming Policy, both of which are accessible from the footer navigation of every page on the platform. In the event of any conflict between this Policy and the Terms & Conditions in respect of data processing matters, this Policy shall prevail.

33bad is committed to operating as a safe and reliable platform. Data protection and player privacy are not afterthoughts — they are integral to how we build and maintain trust with every player across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.

2. Data We Collect

33bad collects personal data through several channels: directly from you when you register an account or interact with the platform; automatically through your use of the website and gaming services; and in limited circumstances from trusted third-party partners such as payment processors and game providers. The categories of data we collect are set out below.

2.1 Registration & Identity Data

When you create a 33bad account, we collect the following information as part of the registration process:

• Full legal name;
• Date of birth (to verify you are 18 years of age or older);
• Country and city of residence (e.g., Dhaka, Chittagong, Sylhet);
• Mobile phone number linked to your bKash, Nagad, or Rocket account;
• Email address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request and process copies of the following documents when verifying your identity or processing withdrawal requests above certain thresholds:

• Government-issued National ID card, passport, or driving licence;
• Proof of residential address (utility bill or bank statement);
• Screenshot or confirmation of payment method ownership (bKash, Nagad, Rocket, Upay);
• Source of funds documentation where required by our anti-money laundering (AML) programme.

2.3 Financial Transaction Data

We record details of all financial transactions conducted through your 33bad account, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and account balance history. Payment method identifiers (such as your registered mobile wallet number) are stored in encrypted form. 33bad does not store full bank card numbers or full mobile banking PINs.

2.4 Technical & Usage Data

When you access the 33bad platform — whether via desktop browser or mobile device — we automatically collect certain technical information, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and features accessed;
• Game history, bet amounts, and wagering patterns;
• Referral source (if you arrived via a specific promotional link).

2.5 Communications Data

If you contact our support team via live chat or by email, we retain records of those communications for customer service quality assurance and dispute resolution purposes. This includes chat transcripts, email threads, and any documentation you submit in connection with a support request.

3. How We Use Your Data

33bad processes your personal data only for specific, lawful purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are summarised in the table below.

Where we rely on your consent as the lawful basis for processing — for example, to send you promotional emails or SMS notifications about new games, cricket season offers, or Eid bonuses — you may withdraw that consent at any time by updating your communication preferences within your account settings or by writing to [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

4. Data Sharing & Third Parties

33bad does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

4.1 Payment Processors

To facilitate deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each payment partner processes your data in accordance with its own privacy terms and applicable financial regulations. 33bad does not receive or store full account credentials for any mobile banking service.

4.2 Game Providers

Games on the 33bad platform are supplied by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a player session token and game result records) to facilitate gameplay and verify outcomes. Game providers do not receive your full identity data, financial transaction history, or KYC documents.

4.3 Legal and Regulatory Disclosures

33bad may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally compelled to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. We will notify affected players of such disclosures where permitted by law to do so.

4.4 Service Providers & Technology Partners

We engage carefully selected third-party service providers to support platform operations, including cloud hosting infrastructure, cybersecurity monitoring, analytics services, and customer support software. These providers act as data processors on our behalf and are contractually bound to process your data only in accordance with our documented instructions and not to use it for any independent purpose.

5. Cookies & Tracking Technologies

33bad uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform effectively, remember your preferences, and understand how the site is used. The main categories of cookies we employ are described below.

5.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that keep you logged in during a gaming session, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure consistent platform performance. No personal data collected by these cookies is used for profiling or marketing purposes.

5.2 Functional Cookies

Functional cookies remember choices you make on the platform — such as your preferred game category, deposit amount defaults, or notification settings. Disabling these cookies may impair the convenience features of your 33bad account but will not prevent access to core gameplay functionality.

5.3 Analytics Cookies

We use anonymised analytics tools to understand aggregate patterns of platform usage — for example, which game categories are most popular among players in Dhaka versus Chittagong, or which promotional pages generate the highest engagement. This data is processed in aggregate and is not linked to identifiable individual player accounts.

5.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Note that clearing cookies will log you out of your current session and may reset certain personalisation settings. Instructions for managing cookies are available in the help section of all major browsers. Strictly necessary cookies cannot be disabled through browser settings as they are required for the secure operation of your account.

6. Data Retention & Security

33bad retains your personal data for as long as your account remains active and for a defined period following account closure, in accordance with applicable legal and regulatory requirements. The standard retention periods applied are as follows:

• Account and identity data: Retained for the lifetime of your active account, plus a minimum of five years following permanent account closure, to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for the duration of your account plus five years post-closure. Physical copies (where submitted) are destroyed securely after digitisation.
• Customer support communications: Retained for three years from the date of the most recent communication in a given support thread.
• Technical and usage logs: Retained for up to 13 months on active systems, after which they are archived or permanently deleted.

6.1 Security Measures

33bad employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 128-bit SSL/TLS encryption for all data transmitted between your browser or device and 33bad's servers;
• Industry-standard bcrypt hashing for all stored passwords — 33bad never stores passwords in plain text;
• Role-based access controls ensuring that only authorised personnel can access sensitive player data;
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure;
• Automated fraud detection systems that flag unusual account or transaction patterns for human review;
• Physical security controls at all data centre facilities used to host the 33bad platform.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 33bad will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

7. Your Rights Over Your Data

As a registered player on the 33bad platform, you hold a number of rights in relation to the personal data we hold about you. 33bad is committed to honouring these rights in full. To exercise any of the rights described below, please contact [email protected] from the email address associated with your 33bad account, clearly stating which right you wish to exercise and providing sufficient information to identify your account.

7.1 Right of Access

You have the right to request a copy of all personal data that 33bad holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data that 33bad holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating a contact number or email address) can be made directly within your account settings. Changes to identity data or KYC records must be submitted via [email protected] with supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other lawful basis applies, or where you object to processing based on legitimate interests. Note that certain data must be retained regardless of an erasure request to satisfy our legal AML and financial record-keeping obligations — in such cases, we will inform you of the specific data that cannot be deleted and the reason why.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about data accuracy is being resolved — you have the right to request that we restrict the processing of your data to storage only. 33bad will act on restriction requests within 72 hours of verification.

7.5 Right to Object

Where we process your data on the basis of legitimate interests, you have the right to object to that processing. You also have an unconditional right to object to the use of your data for direct marketing purposes, including promotional emails and SMS messages about 33bad bonuses and game launches. Objections to marketing communications can be actioned immediately via your account notification settings.

7.6 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transmitted to another controller where technically feasible.

8. Contact & Policy Updates

If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way in which 33bad processes your personal data, please contact our dedicated data support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within four business hours during Bangladesh Standard Time (BST, UTC+6) working hours; within 24 hours for all other queries
• Subject line: Please include "Privacy Request" in the subject line of your email so our team can route it to the appropriate handler promptly.

8.1 Policy Updates

33bad reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where changes are material, we will publish a prominent notice on the 33bad platform and update the "Last updated" date at the top of this page. For significant changes affecting your rights, we will also send a notification to the email address registered to your account at least 14 days before the change takes effect. Continued use of the platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage all players to review this Privacy Policy periodically to stay informed of how 33bad protects and respects your personal information. The current version of this Policy is always available at https://33bad.net/privacy-policy.

This Privacy Policy was last reviewed and updated on 1 January 2026. 33bad is committed to ongoing compliance with applicable data protection standards and will update this document whenever our practices or obligations change.