33bm Privacy Policy

1 Introduction

This Privacy Policy describes how 33bm ("we", "us", or "our") collects, uses, stores, and shares personal data when you access or use the 33bm platform, available at 33bm.asia, including all associated web interfaces, account management functions, betting and casino features, and customer support channels.

33bm is committed to handling your personal information with transparency, care, and respect. We operate the 33bm platform as an offshore online betting and casino service primarily serving players in Bangladesh. This Privacy Policy applies to all registered players, prospective players, and visitors to the 33bm platform regardless of their location.

By registering an account, making a deposit, placing a wager, or otherwise using the 33bm platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This Privacy Policy forms an integral part of the 33bm Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy governs.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the operator of the 33bm platform. All data-related enquiries, subject access requests, and complaints should be directed to the 33bm data team at [email protected], clearly marking the subject of your message as "Privacy / Data Request".

33bm operates as an offshore platform. While we serve players based primarily in Bangladesh, including those using bKash, Nagad, Rocket, and Upay payment services, the platform itself is administered and operated from an offshore jurisdiction. This means that Bangladeshi data protection legislation may not apply directly; however, 33bm voluntarily adopts internationally recognised data protection principles — in particular those embodied in the EU General Data Protection Regulation (GDPR) — as a baseline standard for all players.

3 Data We Collect

33bm collects personal data from you in several ways: directly when you register and use your account, automatically when you interact with the platform, and from third-party payment processors and identity verification services. The categories of personal data we collect include:

4 How We Use Your Data

33bm uses the personal data we collect for the following specific purposes. We only process your data where we have a lawful basis to do so, as described in Section 5 below.

• Account creation and management: To register your player account, verify your identity, and maintain your account in good standing on the 33bm platform.
• Processing transactions: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard securely and accurately, and to maintain a full audit trail of financial activity on your account.
• KYC and fraud prevention: To verify your identity, confirm your age (21+ requirement), detect and prevent fraudulent activity, money laundering, and multi-account creation, and to comply with applicable anti-money-laundering obligations.
• Platform operation and improvement: To deliver the cricket betting, slots, and live casino services you have requested; to personalise your experience; and to analyse aggregate usage data to improve platform performance, game selection, and user experience.
• Customer support: To respond to your enquiries, resolve complaints, process responsible gaming requests (self-exclusion, deposit limits, cooling-off periods), and maintain a record of support interactions.
• Security monitoring: To monitor for unauthorised access, suspicious login activity, bot usage, and other security threats to the platform and to your account.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, tournament announcements (such as BPL season promotions), and platform updates — only where you have given explicit consent to receive such communications.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and enforce the 33bm Terms & Conditions.

5 Legal Basis for Processing

Where 33bm voluntarily applies GDPR-aligned data protection standards, the following legal bases apply to our processing activities:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and 33bm — specifically, to operate your player account and process your transactions.
• Legitimate interests: Security monitoring, fraud detection, platform analytics, and responsible gaming monitoring are carried out on the basis of 33bm's legitimate interest in operating a safe and fair platform. These interests are balanced against your rights and are not overridden by them.
• Legal obligation: KYC identity verification and financial transaction record-keeping are carried out to comply with anti-money-laundering obligations applicable to offshore gaming operators.
• Consent: Marketing communications and the use of non-essential cookies are based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies & Tracking Technologies

33bm uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to remember your session and preferences, to prevent fraud, and — where you have consented — to deliver a more personalised experience. The types of cookies used on 33bm include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies required to maintain your login state. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language selection, bet slip settings, and preferred deposit method. Disabling these cookies may reduce your experience quality but will not prevent access to the platform.
• Analytics Cookies: Used to collect aggregate, anonymised information about how players use the 33bm platform — such as which games are most played, which pages are most visited, and how long sessions typically last. This data is used solely to improve the platform and is never linked back to individual identity profiles.
• Marketing Cookies (consent-based): Only set where you have given explicit consent. Used to provide relevant promotional communications and to measure the effectiveness of 33bm's marketing campaigns. You may withdraw consent for marketing cookies at any time through your account settings.

You can manage or disable cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into the 33bm platform. For further information on managing cookies, refer to your browser's help documentation.

7 Data Sharing

33bm does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients only where strictly necessary and only to the extent required:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process your deposits and withdrawals. These providers receive only the transaction data necessary to complete the payment and are bound by their own privacy policies and financial services regulations.
• Identity verification (KYC) providers: Third-party identity verification services may process your NID/passport data and selfie images solely for the purpose of confirming your identity and age. These providers are contractually bound to use your data only for the purpose of completing 33bm's KYC process.
• Game providers: When you play a game powered by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, or Play'n GO, limited session and gameplay data is transmitted to the relevant provider for the purpose of operating the game. Game providers do not receive your full identity or financial profile.
• IT infrastructure and security providers: Cloud hosting providers, content delivery networks (CDNs), and cybersecurity services that host or protect the 33bm platform infrastructure. These providers act as data processors under contract and may not use your data for their own purposes.
• Legal and regulatory authorities: Where required by law, court order, or a valid request from a law enforcement or financial intelligence authority, 33bm may disclose player data without prior notice to the player.
• Business successors: In the event that the 33bm platform is acquired, merged, or transferred to another operator, player data may form part of the transferred assets. Players will be notified of any such transfer that materially affects the handling of their personal data.

8 Data Retention

33bm retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory obligations that require longer retention. Our standard retention periods are as follows:

• Active account data (identity, contact, financial records): Retained for the full lifetime of your active account plus 5 years following account closure, in line with standard anti-money-laundering record-keeping requirements.
• KYC documents (NID scans, passport copies, selfies): Retained for 5 years after the date of verification or account closure, whichever is later.
• Transaction records (deposit and withdrawal history): Retained for 7 years to comply with financial audit and AML obligations.
• Support communications (chat logs, emails): Retained for 2 years from the date of the last interaction, or longer if related to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your marketing opt-in plus 3 years following withdrawal of consent, as evidence of the original consent.
• Analytics data (aggregated, anonymised): May be retained indefinitely as it is no longer attributable to any individual.

Following the expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. Where technical constraints prevent immediate deletion at the point of expiry, the data will be flagged for deletion in the next scheduled purge cycle and will not be used for any active processing in the interim.

9 Data Security

33bm takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption on all data transmitted between your device and the 33bm platform, including login sessions, payment transactions, and account management actions.
• Encrypted storage of sensitive personal data at rest, including KYC documents, password hashes, and financial records.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. 33bm staff members do not have unrestricted access to player data; access is logged and audited.
• Intrusion detection and monitoring: The 33bm platform is monitored 24/7 for unauthorised access attempts, unusual login patterns, and security anomalies.
• Two-factor authentication (2FA): Available to all registered players to add an additional layer of protection to their accounts. We strongly recommend enabling 2FA via your account security settings.
• Regular security reviews: 33bm conducts periodic internal security reviews and works with external security providers to identify and address vulnerabilities in the platform.

Despite all reasonable precautions, no internet-based service can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights, 33bm will notify affected players without undue delay and take all practicable steps to contain the breach.

10 Your Rights

33bm respects your rights over your personal data. The following rights are available to all registered 33bm players:

• Right of Access: You may request a copy of all personal data 33bm holds about you. Requests will be fulfilled within 5 business days.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Identity-linked data changes (e.g., name or date of birth corrections) may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): Subject to legal retention obligations, you may request the deletion of your personal data upon account closure. Data that must be retained for AML or audit purposes will be quarantined and not used for any active processing.
• Right to Restriction of Processing: You may request that 33bm restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to 33bm, in a format that allows you to transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to 33bm demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the 33bm data team at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. We will acknowledge your request within 2 business days and fulfil it within 30 days, or sooner where practicable.

11 Children & Minors

The 33bm platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under 21 years of age. If you are under 21, you must not register an account or use any part of the 33bm platform.

If 33bm becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and forfeit any funds held therein in accordance with the 33bm Terms & Conditions. If you are a parent or guardian and believe that your child may have registered an account on 33bm, please contact us immediately at [email protected].

12 Third-Party Links

The 33bm platform may contain references to or links to the interfaces of third-party game providers (such as Evolution Gaming or Pragmatic Play live game lobbies). Once you navigate to a third-party interface or service, this Privacy Policy no longer applies to your data. 33bm is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service.

We recommend reviewing the privacy policy of any third-party service you interact with in connection with your 33bm account, particularly those of your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).

13 International Data Transfers

As an offshore platform serving players in Bangladesh, 33bm operates infrastructure that may be located in jurisdictions outside Bangladesh. Your personal data may therefore be transferred to and stored in countries whose data protection laws differ from those applicable in Bangladesh.

Where such transfers occur, 33bm takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data, including contractual obligations placed on our service providers that require them to handle your data in accordance with standards at least equivalent to those described in this Privacy Policy.

By using the 33bm platform, you consent to the transfer of your personal data to our servers and service providers as described in this section, in accordance with the terms of this Privacy Policy.

14 Policy Amendments

33bm reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new category of data sharing — we will notify registered players by email at the address associated with their account and will display a prominent notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed of how 33bm handles your personal data. Your continued use of the platform following any amendment constitutes acceptance of the revised Privacy Policy.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how 33bm has handled your personal data, please contact us using the following details. All privacy enquiries are handled in English by our dedicated data team.

• Email: [email protected] — plain text only, not a clickable link
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request" for fastest routing
• Response Time: Acknowledgement within 2 business days; full response within 30 days
• Support Hours: 24/7 , Bangladesh Standard Time (BST, UTC+6)
• Language: English

33bm takes all privacy complaints seriously. We will investigate each complaint thoroughly and provide a written response detailing our findings and any remedial action taken. Where a complaint reveals a systemic issue, we will take steps to address the root cause and update our data handling practices accordingly.