Data Protection · Privacy · Security

33db Privacy Policy

Your privacy matters to us. This policy explains exactly what personal data 33db collects, why we collect it, how we use it, and what rights you have over your own information. We've written it in plain language so you actually understand it.

Last updated: 1 January 2025

How 33db Protects Your Data

Before you read the full policy, here's a plain-language summary of the six things that matter most to players on 33db when it comes to privacy and data protection.

Your Data Is Encrypted

All data transmitted between your device and the 33db platform is protected using TLS encryption. Sensitive information — including payment details and identity documents — is stored using industry-standard encryption at rest. We don't store card numbers or full payment credentials on our servers.

We Never Sell Your Data

33db does not sell, rent, or trade your personal information to third parties for marketing purposes. Full stop. The data you share with us is used to operate your account, process your transactions, and improve your experience on the platform — nothing else.

You Control Your Data

You have the right to access, correct, or request deletion of your personal data at any time. You can update most of your account information directly in your account settings. For data deletion requests or more complex queries, contact us at [email protected] and we'll respond within 30 days.

Minimal Data Collection

We only collect the data we actually need. Registration requires your name, email, date of birth, and contact details. Payment processing requires transaction information. We don't ask for data we don't have a clear reason to collect, and we don't hold onto data longer than necessary.

Trusted Third Parties Only

Where we share data with third-party service providers — such as payment processors and identity verification services — we do so only with partners who meet our data protection standards and are bound by appropriate data processing agreements. We vet every partner before sharing any player data.

You Choose Your Communications

We only send you marketing communications if you've opted in. You can update your communication preferences in your account settings at any time, or unsubscribe from any email using the link at the bottom of every message we send. Opting out of marketing does not affect transactional or account-related communications.

1Who We Are

33db is an online casino and gaming platform operated for players in Bangladesh. When this Privacy Policy refers to "33db", "we", "us", or "our", it means the company operating the 33db platform at 33db.io. We are the data controller responsible for the personal information you provide when using our platform.

This Privacy Policy applies to all personal data collected through the 33db website, mobile app, and any related services. It should be read alongside our Terms and Conditions, which govern your use of the platform as a whole. If you have any questions about how we handle your data, you can reach us at [email protected].

2Data We Collect

33db collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of the site, and occasionally from third parties as part of our verification processes. Here's a breakdown of what we collect and why:

Category Data Collected Purpose
Registration Data Full name, date of birth, email address, phone number, username Account creation and identity verification
Identity Verification Government-issued ID, proof of address, selfie or photo KYC compliance and age verification
Payment Data bKash/Nagad account numbers, transaction IDs, deposit and withdrawal history Processing deposits and withdrawals
Usage Data Games played, bet amounts, session duration, login times Platform improvement and responsible gaming monitoring
Technical Data IP address, device type, browser, operating system Security, fraud prevention, and platform optimisation
Communications Support chat logs, emails, feedback submissions Customer support and service improvement

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily.

3How We Use Your Data

The data 33db collects is used for specific, legitimate purposes. We don't use your data in ways you wouldn't reasonably expect. Here's how we use the information we hold about you:

  • Account management: To create, maintain, and secure your 33db account, and to verify your identity when required.
  • Transaction processing: To process your deposits and withdrawals via bKash, Nagad, and other supported payment methods.
  • Platform personalisation: To remember your preferences, recommend games you might enjoy, and tailor your experience on 33db.
  • Promotions and bonuses: To determine your eligibility for offers and to credit bonuses to your account correctly.
  • Responsible gaming: To monitor your play patterns and intervene if we identify signs of problem gambling, in line with our responsible gaming obligations.
  • Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
  • Legal compliance: To meet our obligations under applicable laws and regulations, including anti-money-laundering requirements.
  • Customer support: To respond to your enquiries, resolve disputes, and improve our support processes.
  • Marketing communications: To send you promotional offers and updates, but only if you have opted in to receive them.
Note: We never use your data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review.

4Legal Basis for Processing

Every time 33db processes your personal data, we do so on one of the following legal grounds:

  • Contract performance: Processing is necessary to fulfil our obligations to you under the Terms and Conditions — for example, processing your deposits and withdrawals.
  • Legal obligation: We are required by law to collect and retain certain data, particularly for anti-money-laundering and know-your-customer compliance.
  • Legitimate interests: We process some data to pursue our legitimate business interests, such as fraud prevention and platform security, provided these interests are not overridden by your rights.
  • Consent: Where we rely on your consent — for example, for marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5Data Sharing and Third Parties

33db does not sell your personal data. We share data only where it is necessary to operate the platform or comply with legal requirements. The categories of third parties we may share data with include:

  • Payment processors: bKash, Nagad, and other payment service providers require transaction data to process your deposits and withdrawals.
  • Identity verification providers: We use third-party KYC services to verify your identity and age. These providers process your identification documents under strict data protection agreements.
  • IT and hosting providers: Our platform infrastructure is supported by cloud hosting and technology partners who process data on our behalf and are bound by data processing agreements.
  • Fraud prevention services: We share limited data with fraud detection providers to identify and prevent suspicious activity on the platform.
  • Regulatory and law enforcement authorities: We may be required to disclose data to regulators, law enforcement agencies, or courts where required by applicable law.

All third parties who process data on our behalf are required to handle it in accordance with applicable data protection laws and our own data protection standards. We do not permit third-party service providers to use your data for their own purposes beyond the specific service they provide to us.

6Cookies and Tracking Technologies

33db uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. Cookies are small text files stored on your device when you visit the platform. They help us deliver a better, more personalised experience.

The types of cookies we use include:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot opt out of essential cookies.
  • Functional cookies: Remember your preferences such as language settings and display options to personalise your experience.
  • Analytics cookies: Help us understand how players use the platform so we can improve it. Data collected is aggregated and anonymised where possible.
  • Marketing cookies: Used only if you have consented to receive personalised promotions. You can withdraw consent at any time via your account settings.
Cookie Control: You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 33db platform.

7Data Retention

33db retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

  • Account data: Retained for the duration of your account and for a period of five years after account closure, in line with anti-money-laundering regulations.
  • Transaction records: Retained for a minimum of five years from the date of the transaction to comply with financial record-keeping requirements.
  • Identity verification documents: Retained for five years after account closure or the end of our business relationship with you.
  • Support communications: Retained for two years from the date of the last interaction, unless a longer period is required for dispute resolution.
  • Marketing preferences: Retained until you withdraw consent or request deletion.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

8Your Rights

You have a number of rights in relation to the personal data 33db holds about you. These rights are not absolute and may be subject to certain conditions or limitations, but we will always respond to your requests promptly and transparently.

  • Right of access: You can request a copy of the personal data we hold about you at any time.
  • Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected.
  • Right to erasure: In certain circumstances, you can request that we delete your personal data. Note that we may be required to retain some data for legal compliance purposes.
  • Right to restrict processing: You can ask us to limit how we use your data in certain circumstances, for example while a dispute is being resolved.
  • Right to data portability: You can request a copy of your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests, including direct marketing.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

9Data Security

33db takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration. These measures include:

  • TLS encryption for all data in transit between your device and our servers.
  • Encryption at rest for sensitive data including identity documents and payment information.
  • Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
  • Regular security assessments and penetration testing of our platform infrastructure.
  • Two-factor authentication available for all player accounts.
  • Monitoring systems to detect and respond to suspicious activity in real time.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any unauthorised access to your account, please contact us immediately at [email protected]. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay.

10Children's Privacy

The 33db platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on 33db or provided us with personal data, please contact us immediately at [email protected]. We will investigate and, if confirmed, close the account and delete all associated data promptly.

We use age verification measures during registration to prevent minors from accessing the platform. If we discover at any point that an account holder is under 18, the account will be closed immediately and any funds returned to the payment source.

11Changes to This Privacy Policy

33db may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or via an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 33db platform after any changes to this policy constitutes your acceptance of the updated terms.

12Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 33db handles your personal data, please get in touch with us. We take all privacy enquiries seriously and aim to respond within 30 days.

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon on the platform.
  • FAQ: Visit our FAQ page for answers to common questions.

For formal data subject requests — such as access requests, erasure requests, or complaints — please email [email protected] with the subject line "Data Request" and a clear description of what you need. We will acknowledge your request within 5 business days and aim to resolve it within 30 days.

Your privacy is important to us. If you're not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

Your data is safe. Ready to play?

Join thousands of players on 33db. Register in minutes, deposit with bKash or Nagad, and enjoy a secure, fair gaming experience backed by a privacy policy you can actually understand.