Privacy Policy — bda33

bda33 is Bangladesh's premier online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We understand that the personal data you entrust to us is sensitive, and we take our obligations as a data custodian seriously. This Privacy Policy sets out a transparent and complete account of our data practices so that every bda33 player can make informed decisions about their personal information.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the full agreement governing your use of the bda33 platform. References to "bda33", "we", "us", or "our" throughout this document refer to the bda33 platform and its operating entity. References to "you", "your", or "Player" refer to any individual accessing or using the bda33 platform in any capacity.

Section 1

Information We Collect

bda33 collects personal data in several ways: directly from you when you register an account or interact with the platform, automatically through your use of our website and services, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include the following:

We do not collect special category data (as defined under applicable data protection law) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification requirements necessitate the review of a government-issued photograph — in which case the document is reviewed solely for age and identity confirmation and is not stored beyond the period required for verification.

We do not collect data from children. The bda33 platform is strictly for individuals aged 18 and above. If we become aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account closed. Parents or guardians who believe a minor has submitted data to bda33 should contact us immediately at [email protected].

Section 2

How We Use Your Data

bda33 uses the personal data it collects only for defined, lawful purposes. We do not sell your personal data to third parties. We do not use your personal data for purposes incompatible with those stated in this policy without first obtaining your explicit consent. The primary purposes for which bda33 processes personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate essential account-related information to you, including deposit confirmations, withdrawal notifications, and security alerts.
• Service delivery: To provide access to the bda33 platform, process bets and wagers, operate live dealer games and slot titles, and facilitate cricket and sports betting functions that form the core of the bda33 experience.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard, and to process withdrawal requests back to your verified payment method in Bangladeshi Taka (BDT).
• KYC and AML compliance: To fulfil Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, including verifying the identity of players prior to withdrawal milestones, monitoring transaction patterns for suspicious activity, and fulfilling any reporting obligations imposed by applicable law.
• Responsible gaming: To support the responsible gaming tools available on the platform, including deposit limit management, self-exclusion processing, and proactive outreach to players whose usage patterns indicate potential problem gambling behaviour. Further detail is available on our Responsible Gaming page.
• Customer support: To investigate and respond to support requests, complaints, disputes, and general enquiries submitted via live chat or email.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, collusion, and other prohibited conduct as described in our Terms & Conditions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or in-platform notification, where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time through your account settings or by emailing [email protected].
• Analytics and platform improvement: To analyse aggregated usage data, identify trends in player behaviour, optimise game recommendations, improve site navigation, and make informed product development decisions.
• Legal compliance: To comply with applicable laws, respond to valid legal process, enforce our Terms & Conditions, and protect the rights, property, and safety of bda33, its players, and third parties.

Section 3

Legal Basis for Processing

bda33 processes your personal data on one or more of the following lawful bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account registration, bet processing, payment handling, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and bda33.
• Legal obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics is carried out on the basis of bda33's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 4

Data Sharing & Third Parties

bda33 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: Your financial data is shared with payment processors including bKash, Nagad, Rocket, Upay, SureCash, and the card networks (Visa, Mastercard) to the extent necessary to process deposits and withdrawals. These providers are bound by their own strict data protection obligations and are not permitted to use your data for any purpose beyond the processing of your transaction.
• Identity verification providers: During KYC verification, your identity documents and personal details may be shared with third-party identity verification services to confirm your age and identity. These providers operate under data processing agreements with bda33 and are prohibited from retaining your data beyond the period required for verification.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Hacksaw Gaming, and others may receive limited technical data (such as session tokens or player IDs) necessary to deliver game content. These studios do not receive your name, contact details, or financial information.
• Analytics and technology providers: Aggregated and anonymised usage data may be shared with analytics platforms to support platform performance analysis and product improvement. We ensure that any data shared in this context cannot be used to identify individual players.
• Legal and regulatory authorities: bda33 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by valid legal process, applicable law, or to protect the rights and safety of bda33 and its players. We will notify you of such disclosures where legally permissible.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of bda33's business, player data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer where practicable.

All third parties with whom bda33 shares personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using it for purposes beyond those for which it was shared. bda33 maintains written data processing agreements with all relevant third-party processors.

Section 5

Cookies & Tracking Technologies

bda33 uses cookies and similar tracking technologies on bda33.net to improve platform functionality, personalise your experience, and support security and analytics operations. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

The categories of cookies used by bda33 are as follows:

Essential cookies are placed automatically as they are strictly necessary for the platform to operate. Functional, analytics, and marketing cookies are placed only where you have provided consent via the platform's cookie preference settings. You may withdraw your consent to non-essential cookies at any time through your browser settings or account preferences. Please note that disabling essential cookies will impair your ability to use the bda33 platform.

In addition to cookies, bda33 may use web beacons (also known as pixel tags or clear GIFs) in promotional emails to track whether those emails have been opened and whether links within them have been clicked. This data is used solely for measuring the effectiveness of our marketing communications and optimising future outreach.

Section 6

Data Security Measures

The specific security measures implemented by bda33 to protect player data include the following:

• 256-bit SSL/TLS encryption: All data transmitted between your device and bda33.net is encrypted using 256-bit SSL/TLS protocols. This ensures that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Data encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted when stored on bda33's servers. Encryption keys are managed separately from the encrypted data and are subject to strict access controls.
• Access controls: Access to player personal data is restricted on a strict need-to-know basis. Only authorised bda33 personnel whose role requires access to personal data are granted access, and all access is logged and audited.
• Secure password storage: Player account passwords are hashed using industry-standard cryptographic algorithms. bda33 staff cannot view your password in plain text at any point.
• Fraud detection systems: Automated real-time monitoring systems run continuously to detect suspicious login attempts, unusual transaction patterns, and other indicators of unauthorised account access or fraudulent activity.
• Third-party security audits: bda33 engages independent security professionals to conduct periodic vulnerability assessments and penetration tests of the platform's infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, bda33 will notify affected players without undue delay and will take all necessary remedial steps to contain and address the breach. We will also fulfil any applicable notification obligations to relevant authorities as required by law.

You also have a role to play in keeping your account data secure. We strongly recommend using a strong, unique password for your bda33 account, not sharing your login credentials with any other person, and logging out of your account when using shared or public devices. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

Section 7

Data Retention

bda33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply to the main categories of player data:

• Account and identity data: Retained for the duration of your active account relationship with bda33, and for a minimum of five years following account closure, in order to fulfil AML record-keeping obligations and to respond to any regulatory enquiries or legal claims that may arise.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping requirements under applicable law.
• KYC verification documents: Retained for the period required to complete the verification process, plus an additional period as required by AML regulations. Copies of identity documents are not retained beyond the period strictly necessary.
• Customer support communications: Retained for three years from the date of the last interaction, to support ongoing dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance in the event of a dispute or regulatory enquiry.
• Technical and usage data (logs): Retained for up to 12 months for security and fraud investigation purposes, after which they are deleted or anonymised.

Where personal data is no longer required for any active purpose and the applicable retention period has elapsed, bda33 will securely delete or anonymise that data in a manner that prevents its recovery or reconstruction. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for aggregate analytics and research purposes.

Section 8

Your Rights as a Data Subject

As a player on the bda33 platform, you hold the following rights with respect to your personal data. bda33 is committed to facilitating the exercise of these rights promptly and without undue barriers:

• Right of access: You have the right to request a copy of the personal data that bda33 holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe of receiving a valid request.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by bda33 be corrected or completed. Minor corrections (such as updating a contact number or address) can be made directly through your account settings; for more significant corrections, please contact our support team.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request the deletion of your personal data. bda33 will assess such requests against its legal and regulatory obligations — in particular, the requirement to retain financial records and AML documentation — and will delete data where no overriding obligation applies.
• Right to restriction of processing: You have the right to request that bda33 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of whether legitimate grounds override your interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to bda33 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Upon receipt of a valid objection to marketing, bda33 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where bda33 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with sufficient information to identify your account and the specific right you wish to exercise. bda33 will acknowledge your request within five business days and provide a substantive response within 30 days. In cases of complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

bda33 will not charge a fee for processing reasonable data subject rights requests. However, where requests are manifestly unfounded or excessive — in particular because of their repetitive character — bda33 reserves the right to charge a reasonable administrative fee or to decline to act on the request.

Section 9

International Data Transfers

The bda33 platform operates with server infrastructure and third-party service providers that may be located in jurisdictions outside Bangladesh. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Bangladesh, bda33 ensures that appropriate safeguards are in place before making the transfer. These safeguards may include:

• Standard contractual clauses approved by competent data protection authorities, incorporated into data processing agreements with receiving parties;
• Transfers to recipients in jurisdictions that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where transfers occur within a corporate group;
• Your explicit consent to the transfer, where no other safeguard is applicable and consent is a viable legal basis.

You may request further information about the specific safeguards bda33 has implemented for international transfers of your personal data by contacting [email protected]. We will provide details of the relevant transfer mechanism upon request, subject to any confidentiality obligations that apply.

Section 10

Changes to This Policy

bda33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform functionality, data processing activities, or industry best practices. When material changes are made, the revised policy will be published on this page with an updated effective date, and we will endeavour to notify registered players of significant changes via a platform notification or email.

Your continued use of the bda33 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We recommend reviewing this page periodically — at least once every three months — to stay informed of how bda33 handles your personal data. If you have concerns about any changes made to this policy, you are encouraged to contact our support team before continuing to use the platform.

For all privacy-related enquiries, data subject rights requests, or concerns about how bda33 processes your personal data, please contact us at [email protected]. We aim to acknowledge all privacy-related correspondence within 24 hours of receipt during Bangladesh Standard Time (BST, UTC+6) business hours.