33zz Privacy Policy

1. Information We Collect

33zz collects personal data through several distinct channels: directly from you when you register or use the platform, automatically through your device and browser as you interact with the site, and from trusted third-party sources such as payment providers and identity verification services. The categories of data we collect are described in full below.

1.1 Registration and Account Data

When you create a 33zz account, we collect the following information to establish and maintain your player profile:

• Full legal name as it appears on your government-issued identification document.
• Date of birth, collected to verify that you meet the 18+ age requirement.
• Email address, used for account communications, security alerts, and promotional messages where you have opted in.
• Mobile phone number, which may also serve as the registered number on your bKash, Nagad, Rocket, or Upay mobile wallet account.
• Residential address in Bangladesh or your country of residence.
• Username and hashed password credential (passwords are never stored in plain text).

1.2 Identity Verification Data

To comply with our age verification and responsible gaming obligations, 33zz may request copies of identity documents at the point of registration or prior to processing a withdrawal. Documents collected for this purpose may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (biographical data page).
• Birth registration certificate where NID is not available.
• Utility bill or bank statement as proof of residential address (issued within 90 days).
• Selfie photograph or short video clip for liveness verification purposes.

Identity documents are processed by our internal compliance team and, where a third-party verification service is used, transmitted securely to that provider in accordance with section 3 of this policy. Documents are stored in an encrypted environment with strict access controls.

1.3 Financial and Transaction Data

When you make a deposit or withdrawal on 33zz, we collect transaction records including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction reference numbers, amounts in BDT, timestamps, and the outcome of each transaction. 33zz does not store full card numbers or mobile wallet PINs — payment processing is handled by secure third-party payment gateways and mobile financial services.

1.4 Gaming and Betting Activity Data

We record your activity on the 33zz platform for operational, fairness, and responsible gaming purposes. This includes game session logs, bet amounts, game outcomes, win and loss records, bonus activation and wagering progress, and sports betting market selections. This data is used to operate the platform accurately, resolve disputes, and monitor for problem gambling indicators.

1.5 Technical and Device Data

When you visit and interact with 33zz, we automatically collect certain technical information from your device and browser, including:

• IP address and approximate geographic location derived from it.
• Browser type, version, and language settings.
• Operating system and device type (desktop, mobile, tablet).
• Pages visited, time spent on each page, and navigation path through the site.
• Referring URL (the site or search result that directed you to 33zz).
• Session identifiers and cookie values (see section 4 for full cookie details).

2. How We Use Your Data

33zz processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The legal basis and operational purpose for each category of processing activity is set out in the table below.

2.1 Marketing Communications

33zz will only send you promotional emails, SMS messages, or in-platform notifications regarding bonuses, seasonal offers (such as Eid promotions, BPL cricket specials, or Pohela Boishakh bonuses), and new game launches if you have explicitly opted in to receive such communications at registration or through your account preferences. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting [email protected] (plain text). Withdrawal of marketing consent does not affect the processing of data necessary for platform operation.

2.2 Automated Decision-Making

33zz uses automated processes to detect fraud, identify problem gambling patterns, and flag accounts for manual review. These automated processes do not make final binding decisions — they surface alerts for review by our compliance and responsible gaming teams. Where an automated process results in an account restriction, you have the right to request a human review of that decision by contacting [email protected] (plain text).

3. Data Sharing & Disclosure

33zz does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We share personal data only in the limited circumstances described in this section, and only with parties who are contractually bound to protect it in accordance with standards equivalent to those described in this policy.

3.1 Payment Service Providers

To process your deposits and withdrawals, 33zz transmits the minimum necessary transaction data to the relevant payment service provider — bKash, Nagad, Rocket, Upay, or the applicable card network. These providers are independent data controllers in respect of the data they receive and are subject to their own privacy frameworks and financial regulatory obligations. 33zz does not receive or store your mobile wallet PIN, card CVV, or full card number.

3.2 Identity Verification Services

Where we use a third-party provider to assist with age or identity verification, the personal data submitted for that purpose (typically a document image and a selfie) is shared with that provider under a data processing agreement. The provider is prohibited from using that data for any purpose other than verification on our behalf.

3.3 Game Technology Providers

Games on the 33zz platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive session tokens and anonymised player identifiers sufficient to operate the game correctly. They do not receive your full name, contact details, or financial information unless specifically required for live casino studio compliance purposes, in which case the minimum necessary data is shared under a data processing agreement.

3.4 Legal and Regulatory Disclosures

33zz may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or to protect the rights, property, or safety of 33zz, its players, or the general public. We will notify affected players of such disclosures where we are legally permitted to do so.

3.5 Business Transfers

In the event that 33zz undergoes a merger, acquisition, or sale of all or part of its business assets, player data held at the time of that transaction may be transferred to the acquiring entity as part of that transaction. Any acquiring entity would be bound by the obligations set out in this Privacy Policy in respect of data collected prior to the transfer.

4. Cookies & Tracking

33zz uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and to collect aggregated analytics data that helps us improve the player experience. This section explains what cookies we use, why we use them, and how you can manage them.

4.1 Types of Cookies Used

4.2 Managing Your Cookie Preferences

You can control which non-essential cookies are stored on your device by adjusting the settings in your web browser. Most modern browsers allow you to block cookies, delete existing cookies, or receive notifications before a cookie is stored. Please note that disabling functional or analytics cookies will not prevent you from using 33zz, though some display preference features may not persist between sessions.

33zz does not use third-party advertising cookies or social media pixel trackers. The analytics data we collect is used solely to improve the performance, usability, and reliability of the 33zz platform for players in Bangladesh and is not shared with or sold to advertising platforms.

5. Data Security

33zz implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures are reviewed and updated regularly in line with industry standards and emerging threats.

• TLS/SSL Encryption in Transit: All data transmitted between your browser or mobile device and the 33zz platform is encrypted using TLS 1.2 or higher. This applies to login requests, game sessions, deposit flows, and all API communications.
• AES-256 Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Password Security: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm with per-account salt values. 33zz staff cannot view your password under any circumstances.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: 33zz operates automated systems to monitor for suspicious login attempts, unusual transaction patterns, and signs of account compromise. Alerts generated by these systems are reviewed by our security team around the clock.
• Secure Data Centres: Player data is hosted in secure, access-controlled data centre environments with physical security, redundant power, and environmental controls.

While 33zz applies rigorous technical and organisational security measures, no online platform can guarantee absolute protection against all possible security threats. In the event of a data breach that poses a risk to your rights and freedoms, 33zz will notify affected players without undue delay and take all reasonable steps to contain, investigate, and remediate the breach.

6. Data Retention

33zz retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, financial, or regulatory obligations. The retention periods below reflect our standard approach; specific circumstances (such as an open dispute or active investigation) may require data to be retained for longer.

When the applicable retention period has expired and no legal obligation requires further storage, 33zz will either securely delete the data or anonymise it in a manner that makes it impossible to re-identify the individual to whom it relates. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

If you close your 33zz account voluntarily or your account is closed by 33zz due to a breach of our Terms & Conditions, the data retention periods described above continue to apply from the date of closure. Account closure does not trigger immediate deletion of your personal data.

7. Your Rights

As a 33zz player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link). We will acknowledge your request promptly and respond in full within 30 days. In cases of complexity or high volume, we may extend this period by a further 30 days and will notify you accordingly.

• Right of Access: You may request a copy of the personal data 33zz holds about you, together with an explanation of how it is used and with whom it is shared. This is commonly referred to as a Subject Access Request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain details directly through your account settings.
• Right to Erasure: In certain circumstances, you may request that we delete the personal data we hold about you. This right is subject to our legal obligations — where we are required by law to retain data for a specified period, we cannot erase it ahead of that deadline.
• Right to Restrict Processing: You may request that we suspend processing of your data in specific circumstances, for example while the accuracy of the data is being verified or a complaint is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your data where that processing is based on our legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8. Contact & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 33zz holds about you, please contact our data protection team at [email protected] (plain text — not a clickable link). Our support team is available 24 hours a day, 7 days a week, and will direct your enquiry to the appropriate team member for handling.

Please include "Privacy Request" or "Data Rights" in the subject line of your email so that your message is correctly routed. For Subject Access Requests, please also include your registered username and the email address associated with your 33zz account to assist with identity verification.

8.1 Policy Updates

33zz reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable laws, or regulatory requirements. When material changes are made, the updated policy will be published on this page with a revised effective date prominently displayed at the top of the document.

For significant changes that materially affect the way we use your personal data, we will provide advance notice via email to your registered address or through an in-platform notification. Your continued use of the 33zz platform after a revised Privacy Policy has been published constitutes your acknowledgement of the updated terms. If you do not agree with a revised policy, you should cease using the platform and request account closure.

8.2 Language and Governing Version

This Privacy Policy is written in English. The English version is the authoritative version for all interpretive purposes. While 33zz serves the Bangladesh market and this policy is designed to be clear and accessible to English-speaking players in Bangladesh, any ambiguity in translation or interpretation is resolved by reference to the English text on this page.