33cb Privacy Policy

1. Who We Are

33cb (referred to throughout this document as "33cb", "we", "us", or "our") operates the online sports betting and casino platform accessible at https://33cb.io, including all associated sub-pages, mobile-optimised interfaces, and services delivered thereunder. This Privacy Policy applies to all personal data processed in connection with the 33cb platform and all related services offered to registered players, visitors, and prospective users.

33cb is the data controller in respect of all personal data collected from players and visitors through the 33cb platform. As data controller, 33cb is responsible for determining the purposes and means by which personal data is processed. All enquiries relating to this Privacy Policy or to the exercise of your data rights should be directed to [email protected].

This Privacy Policy is written in English and governs the relationship between 33cb and players based in Bangladesh. Where any translated version of this document exists for informational purposes, the English version shall prevail in all cases of conflict or ambiguity.

2. Personal Data We Collect

33cb collects personal data across several categories depending on the nature of your interaction with the platform. The categories of data we collect are as follows:

Category	Examples of Data Collected	When Collected
Identity Data	Full legal name, date of birth, gender, Bangladesh NID number, passport or driving licence details	Registration and KYC verification
Contact Data	Bangladesh mobile number, email address, residential address	Registration and account updates
Financial Data	bKash / Nagad / Rocket / Upay account number, bank account name and number, transaction history, deposit and withdrawal amounts in ৳ BDT	Deposit and withdrawal processing; KYC
Account Activity Data	Login timestamps, session durations, bet history, casino game rounds, bonus usage, responsible gaming limit settings	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, referring URL	Every visit to the platform
Communications Data	Content of live chat sessions, support emails, complaint submissions, and feedback forms sent to 33cb	When you contact support
KYC Document Data	Scanned copies or photographs of identity documents, proof-of-address documents, and payment method evidence submitted for verification	KYC verification process

We do not knowingly collect special category (sensitive) personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless such information is incidentally contained within a document submitted for KYC purposes (for example, some national identity cards may display religion). Where such data is incidentally received, it is not used for any processing purpose and is stored only as part of the KYC document record.

3. How We Collect Your Data

33cb collects personal data through the following means:

3.1 Direct Collection

You provide data directly to 33cb when you: register an account on the platform; complete KYC identity verification; make a deposit or withdrawal; set responsible gaming limits on your account; contact the 33cb support team by any channel; or respond to a survey or promotional communication.

3.2 Automated Technical Collection

When you visit https://33cb.io, our servers automatically record certain technical information including your IP address, browser type, referring URL, pages visited, and session duration. This data is collected through server logs and, where applicable, through cookies and similar tracking technologies (see Section 7 for full details on cookies).

3.3 Third-Party Sources

In limited circumstances, 33cb may receive personal data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, and partner banks) — to confirm transaction completion and verify that the payment method belongs to you.
• KYC and identity verification partners — to cross-reference the identity documents you submit against external databases, supporting the accuracy and integrity of the verification process.
• Fraud prevention and anti-money laundering (AML) screening services — to flag accounts or transactions associated with known fraud patterns or sanctioned entities.

In each case, 33cb processes third-party sourced data only for the specific purpose for which it was obtained and retains it only for as long as that purpose requires.

4. Why We Use Your Personal Data

33cb processes your personal data for the following purposes:

• Account creation and management: To register your 33cb account, authenticate your identity at login, and manage your account settings and preferences.
• KYC and age verification: To confirm that you are aged 21 or above and that the identity you have provided is accurate, in line with responsible gaming obligations and anti-fraud requirements.
• Payment processing: To facilitate deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and bank transfer, and to match payment methods to the registered account holder.
• Service delivery: To make sports betting markets, live casino games, slot titles, and promotional offers available to your account and to record the outcomes of your bets and game rounds.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion periods set by you, and to provide the 33cb responsible gaming toolset.
• Fraud prevention and security: To detect and investigate suspicious account activity, unauthorised access attempts, multi-accounting, bonus abuse, money laundering, and other prohibited conduct defined in the 33cb Terms & Conditions.
• Customer support: To respond to your queries, complaints, and account disputes through the 33cb support team.
• Legal compliance: To meet obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations, and to respond to lawful requests from government authorities or courts.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, security, and user experience of the 33cb platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by your registered contact method — subject to your marketing preferences and the right to opt out at any time (see Section 14).

5. Legal Basis for Processing

33cb relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil the contract between you and 33cb — including account management, payment processing, bet settlement, and KYC verification — is carried out on the basis that it is necessary to perform the services you have signed up for.
• Legitimate interests: Fraud prevention, platform security monitoring, aggregated analytics for service improvement, and communications data retention for dispute resolution are processed on the basis of 33cb's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Certain processing — including transaction record keeping for AML purposes, responding to lawful authority requests, and implementing self-exclusion orders — is carried out because 33cb is legally required to do so.
• Consent: Marketing communications (promotional emails, bonus SMS notifications) are sent on the basis of your explicit consent, given at registration or subsequently. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

33cb does not sell, rent, or trade your personal data. We share data with third parties only in the following defined circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, 33cb shares the minimum necessary transaction data with the relevant payment service provider — bKash, Nagad, Dutch-Bangla Bank (Rocket), Upay, or a partner bank. Each payment provider is a separate data controller in respect of the data you share directly with them through their own application or platform, and their own privacy policies govern that processing.

6.2 Game Content Providers

Live casino and slot games are delivered by third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. To deliver a personalised and uninterrupted game experience, these studios may receive a session token and an anonymised player identifier. They do not receive your full name, contact details, or payment information.

6.3 KYC and Fraud Prevention Partners

33cb works with specialist identity verification and AML screening providers to carry out KYC checks. These providers process the identity documents and personal data you submit for the sole purpose of completing the verification required by 33cb. They are contractually bound by strict data processing agreements.

6.4 Legal and Regulatory Authorities

33cb may disclose your personal data to law enforcement agencies, government bodies, courts, or regulatory authorities where required to do so by law, by court order, or where 33cb reasonably believes such disclosure is necessary to protect the rights, property, or safety of 33cb, its players, or the public.

6.5 Business Transfers

In the event that 33cb undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity. In such an event, 33cb will notify affected players via their registered contact details before any transfer occurs, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

Outside of the categories listed above, 33cb will not share your personal data with any third party without your explicit prior consent.

7. Cookies and Tracking Technologies

33cb uses cookies and similar tracking technologies on the platform to deliver core functionality, maintain session security, and understand how the platform is being used. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 33cb platform to function. They maintain your login session, store your language and currency preferences, and remember items in your bet slip. These cookies cannot be disabled without affecting core platform functionality.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the platform — which pages are visited most, how long sessions last, and where navigation errors occur. This information is used solely to improve 33cb's platform performance and user experience. No individually identifiable data is retained for analytics purposes.
• Functional Cookies: These cookies remember your account preferences — such as your chosen odds format and notification settings — so that you do not need to re-configure them on each visit.
• Security Cookies: These cookies help 33cb detect and prevent fraudulent login attempts, credential stuffing, and other automated attacks on player accounts.

33cb does not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites outside of the 33cb platform. You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your 33cb account.

8. Data Retention

33cb retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial, activity data): Retained for the duration of your account relationship with 33cb plus a minimum of five years following permanent account closure, to satisfy AML record-keeping obligations.
• KYC documents (identity and address verification documents): Retained for a minimum of five years following the completion of the verification process or the closure of the account, whichever is later.
• Transaction records (deposit and withdrawal history): Retained for a minimum of five years in line with financial record-keeping standards applicable to online payment processing.
• Customer support communications (chat logs, support emails): Retained for two years following the resolution of the relevant query or complaint, to allow for follow-up and dispute resolution.
• Technical and server log data (IP addresses, session logs): Retained for a rolling 90-day period for security monitoring purposes, after which it is deleted or anonymised.
• Marketing consent records: Retained for the duration of your account relationship and for one year after consent is withdrawn, as evidence of the consent originally given.

When personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9. Data Security

33cb implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. The key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and 33cb servers is encrypted using industry-standard SSL/TLS protocols. The padlock symbol in your browser address bar confirms this encryption is active during your session.
• Encrypted Data Storage: Personal data held in 33cb databases — including identity documents, contact details, and financial records — is stored in encrypted form. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within 33cb's internal systems is restricted to authorised personnel whose roles require access to that specific data category. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication: 33cb supports two-factor authentication (2FA) for player account login as an optional security enhancement. Players are encouraged to enable 2FA from their account security settings.
• Penetration Testing and Security Audits: 33cb's platform and infrastructure are subject to regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach affecting player personal data, 33cb has an incident response procedure in place. Affected players will be notified as soon as practicably possible, with information about the nature of the breach and recommended protective actions.

While 33cb takes data security seriously and applies robust technical and organisational measures, no online system can be guaranteed to be completely immune from all security threats. Players are responsible for keeping their own account credentials — including their password and mobile number — secure and for logging out of shared or public devices after each session.

10. Your Data Rights

As a 33cb player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise. 33cb will respond within 30 calendar days of receipt.

• Right of Access: You may request a copy of all personal data that 33cb holds about you. 33cb will provide this in a clear, structured format within 30 days of your verified request.
• Right to Rectification: If any personal data held by 33cb about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating a contact number) can be made through your account dashboard; corrections to identity data require supporting documentation.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other lawful basis applies. Note that 33cb may be required to retain certain data (particularly financial and KYC records) for legal compliance purposes even following an erasure request, and will explain the basis for any such retention.
• Right to Restriction: You may request that 33cb restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. 33cb will assess whether its legitimate interests override your rights and will cease the relevant processing where they do not.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Children and Minors

33cb is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. All players are required to confirm their age as part of the registration process, and mandatory KYC verification is in place to confirm that every account holder is aged 21 or above before withdrawals are processed.

If 33cb becomes aware that a player account has been registered by a person under the age of 21, the account will be immediately closed, all pending transactions will be cancelled, and any real-money balance will be returned to the payment method used for the most recent deposit. The matter will be escalated under 33cb's responsible gaming procedures.

If you believe that a minor has accessed or registered an account on 33cb, please contact [email protected] immediately. 33cb takes under-age gambling extremely seriously and will investigate all such reports without delay.

12. International Data Transfers

33cb's primary player base is in Bangladesh, and we aim to process player data within the region wherever possible. However, some of the third-party service providers that 33cb works with — including game content studios, KYC verification platforms, and certain cloud infrastructure providers — may be located in or may process data in jurisdictions outside Bangladesh.

Where personal data is transferred outside Bangladesh, 33cb takes steps to ensure that an equivalent level of data protection is maintained. This may include requiring receiving parties to adhere to contractual data processing standards, or selecting service providers that operate under recognised international data protection frameworks.

If you have questions about specific international transfers relating to your personal data, contact [email protected] and 33cb will provide relevant information about the safeguards in place.

13. Third-Party Links and Services

The 33cb platform may contain references to third-party payment platforms (bKash, Nagad, Rocket) and game studios (Evolution Gaming, Pragmatic Play, etc.) as part of the service experience. Where your interaction with those platforms takes you outside the 33cb environment — for example, when authorising a bKash payment through the bKash mobile application — the processing of your data within those external environments is governed by the relevant third party's own privacy policy.

33cb is not responsible for the privacy practices of third-party platforms that you access independently in connection with using the 33cb service. We recommend that you review the privacy policies of any third-party service you use in connection with your 33cb account, including your mobile banking provider.

14. Marketing Communications

With your consent, 33cb may send you promotional communications including: new bonus offer announcements; seasonal promotional campaigns (such as BPL tournament offers, Eid celebration promotions, or Pohela Boishakh special events); platform feature updates; and responsible gaming reminders. Marketing communications are sent via your registered mobile number (SMS) and/or registered email address.

You may opt out of marketing communications at any time by:

• Replying "STOP" to any promotional SMS received from 33cb.
• Clicking the unsubscribe link in any promotional email from 33cb.
• Contacting [email protected] with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications will not affect transactional notifications that are necessary for your account — such as deposit confirmations, withdrawal status updates, KYC request notifications, and responsible gaming alerts. These operational communications are sent on the basis of contractual necessity and cannot be fully opted out of while your account remains active.

15. Complaints About Data Handling

If you have a concern about how 33cb has handled your personal data, we encourage you to contact us directly in the first instance. The majority of data concerns can be addressed quickly and informally by the 33cb support team.

To raise a formal data complaint, contact [email protected] with the subject line "Data Protection Complaint" and provide a clear description of your concern and the outcome you are seeking. 33cb will acknowledge your complaint within 48 hours and aim to resolve it within 30 calendar days.

If you are not satisfied with 33cb's response to your complaint, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. 33cb will provide information about the applicable escalation route upon request.

16. Changes to This Privacy Policy

33cb reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, 33cb will notify registered players via their registered contact details — by SMS or email — at least 7 days before the revised Policy takes effect.

The "Last Updated" date at the top of this document will always reflect the date on which the current version was published. We recommend reviewing this page periodically, particularly following any notification of changes. Your continued use of the 33cb platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

For minor editorial corrections or clarifications that do not materially affect player rights, 33cb may update the document without advance notification and will update the "Last Updated" date accordingly.

17. Contact Us

For all privacy-related queries, data rights requests, and formal complaints, please contact 33cb using the following details:

• Email: [email protected] (plain text — not a clickable link; type this address into your email client)
• Subject Line Guidance: Use "Data Rights Request", "Data Protection Complaint", or "Privacy Policy Query" as appropriate, to ensure your message is routed to the correct team.
• Response Time: Standard privacy queries within 48 hours; formal data rights requests within 30 calendar days of receipt of a verified request.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Language: English

When contacting 33cb about a data rights request, please include your registered mobile number and full name so that we can verify your identity before processing the request. 33cb will not action data rights requests from unverified senders.