33kb Privacy Policy — Your Data, Your Rights, Our Commitment

This Privacy Policy ("Policy") describes how 33kb ("33kb", "we", "us", "our"), the operator of the online betting and gaming platform at https://33kb.io and all associated subdomains and mobile interfaces (collectively, "the Platform"), collects, processes, stores, and protects personal information about users registered on or visiting the Platform ("you", "your", "the User").

33kb is committed to protecting the privacy and security of every user who engages with our Platform. We recognise that trust is built on transparency, and this Policy is designed to give you a clear and complete picture of how your data is handled. We encourage you to read this document in full before using the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Policy and that you consent to the data practices described herein.

33kb collects personal data through several channels. The categories of data we collect, and the circumstances in which we collect them, are detailed below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address (city, district), email address, and mobile number provided when you create your 33kb account.
• Identity verification (KYC) documents: Copies of government-issued national identification cards, passports, or other documents submitted to verify your identity and age.
• Payment information: Mobile banking account details (bKash, Nagad, Rocket, Upay), bank account numbers, and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are not stored by 33kb — payment processing is handled by certified third-party payment gateways.
• Support communications: The content of messages, emails, or live chat conversations you initiate with the 33kb support team.
• Responsible gaming declarations: Any self-disclosure of problem gambling, self-exclusion requests, or limit-setting preferences you submit via the Platform.

2.2 Data Collected Automatically

• Device and browser information: IP address, device type, operating system version, browser type and version, screen resolution, and device language settings.
• Usage data: Pages visited, games played, bets placed, session duration, click-path data, and time stamps of key actions within the Platform.
• Location data: General geographic location inferred from your IP address. We do not collect precise GPS coordinates.
• Cookie and tracking data: As described in Section 6 of this Policy.

2.3 Data from Third Parties

• Payment providers: Transaction status confirmations and fraud-screening signals from bKash, Nagad, Rocket, and card-processing partners.
• KYC verification services: Identity match scores and document authenticity signals from third-party identity verification providers.
• Game providers: Session logs, game round identifiers, and result data from Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, Microgaming, and other integrated studios, for the purpose of dispute resolution and audit.

33kb uses personal data for the following purposes. We process personal data only where we have a lawful basis to do so, as detailed in Section 4.

• Account management: Creating and maintaining your 33kb account, authenticating your identity at login, and enabling access to all Platform features.
• Transaction processing: Receiving and crediting deposits, processing withdrawal requests, and maintaining a complete and auditable transaction history for your account.
• Identity and age verification: Conducting KYC checks to confirm that you are who you claim to be and that you meet the minimum age requirement of 21 years.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, and money laundering activity.
• Responsible gaming compliance: Monitoring account activity for signs of problem gambling, enforcing self-exclusion requests, applying deposit limits and time-out periods, and fulfilling regulatory obligations related to player protection.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance and training.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve the user experience, and develop new features.
• Legal compliance: Fulfilling obligations under applicable anti-money-laundering (AML) regulations, tax reporting requirements, and any lawful instruction from a competent authority.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform news where you have opted in to receive such communications. See Section 11 for opt-out details.

For each purpose described in Section 3, 33kb relies on one or more of the following legal grounds for processing your personal data:

• Contractual necessity: Processing that is necessary to perform the contract between you and 33kb — specifically, to operate your account, process bets and payments, and deliver the services you have registered to use.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for 33kb's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have given clear, specific, and freely given consent to a processing activity — primarily in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

33kb does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: We share relevant transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) to facilitate deposits and withdrawals. These parties process your data as independent data controllers under their own privacy policies.
• Identity verification providers: We share identity documents and personal details with certified KYC service providers to complete age and identity verification checks.
• Game providers: Session and game-round data is shared with integrated game studios (Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, Microgaming, and others) solely for the purposes of game delivery, dispute resolution, and technical audit.
• Fraud prevention services: We may share device identifiers, IP addresses, and behavioural signals with industry fraud-prevention networks to protect the integrity of the Platform and all its users.
• Legal authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the safety of our users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 33kb's business, user data may be transferred to the acquiring entity as part of the transaction. We will notify affected users via email prior to any such transfer taking effect.

33kb uses cookies and similar tracking technologies to operate the Platform effectively. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are required for the Platform to function. They enable core features such as user authentication, session management, and security checks. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies: These cookies remember your preferences (such as language settings and preferred game categories) to provide a more personalised experience. They do not track your activity across external websites.
• Performance and analytics cookies: We use first-party analytics tools to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, features used, and error events. This data is used solely to improve the Platform.

33kb does not deploy third-party advertising or retargeting cookies. We do not permit ad networks to set cookies on our Platform for the purpose of building user profiles for off-platform advertising.

33kb retains personal data for the periods set out in the table below, or for longer periods where required by applicable law. Once a retention period has expired, data is securely deleted or irreversibly anonymised.

For dormant accounts (no login activity for 12 consecutive months), we will notify you by email before any data deletion process begins. You will have 30 days to reactivate your account before data archival procedures are initiated.

33kb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 33kb Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at rest: Sensitive stored data — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data by 33kb staff is strictly limited on a need-to-know basis. All staff with data access undergo background checks and receive mandatory data protection training.
• Segregated player funds: Player account balances are held in segregated accounts separate from 33kb's operational funds, ensuring that your deposited money is ring-fenced at all times.
• Intrusion detection and monitoring: The Platform is monitored 24/7 for suspicious activity, unauthorised access attempts, and anomalous transaction patterns.
• Penetration testing: 33kb engages independent security specialists to conduct periodic penetration tests and vulnerability assessments of the Platform infrastructure.
• Incident response: In the event of a data security incident that is likely to pose a risk to your rights and freedoms, 33kb will notify affected users without undue delay and will take immediate steps to mitigate the impact.

33kb respects your rights in relation to your personal data. You may exercise the following rights at any time by contacting our support team via live chat or by emailing [email protected]:

• Right of access: You have the right to request a copy of the personal data that 33kb holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that 33kb delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing. This right is subject to legal retention obligations that may require us to retain certain data beyond your request.
• Right to restriction of processing: You may request that 33kb restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing whether legitimate grounds override your objection.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

The 33kb Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or engage in any gambling activity on the Platform.

If 33kb becomes aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, void any winnings, return deposited funds where possible, and permanently delete all personal data collected from that individual.

If you believe that a minor has registered an account or provided personal data to 33kb, please contact us immediately at [email protected] so that we can take swift action. We take underage gambling prevention extremely seriously and co-operate fully with parental control service providers and responsible gaming organisations operating in Bangladesh.

Where you have opted in during registration or subsequently through your account settings, 33kb may contact you with promotional offers, bonus notifications, seasonal promotions (such as Eid special offers, BPL tournament promotions, and Pohela Boishakh bonuses), and general platform news. We may communicate via email, SMS to your registered mobile number, or in-platform notification.

We do not share your contact details with third-party marketers. All marketing communications sent by 33kb are for 33kb promotions only.

• Opting out: You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, by adjusting your notification preferences in your account dashboard, or by contacting our support team directly.
• Opting out does not affect service communications: Unsubscribing from marketing does not prevent 33kb from sending you essential service communications such as deposit confirmations, withdrawal notifications, security alerts, or updates to these policies.
• Processing time: Opt-out requests for marketing communications are processed within 5 business days. You may receive one or two further communications while the opt-out is being actioned.

The 33kb Platform does not contain links to third-party websites, except for those directly integrated as part of the Platform's service delivery (such as payment gateways and game providers). This Policy applies exclusively to data collected by 33kb on the Platform.

Game providers such as Evolution Gaming, Ezugi, Pragmatic Play, and Spribe deliver their game content within the 33kb Platform environment. While these providers may process certain technical session data as part of game delivery, 33kb contractually requires all integrated providers to comply with data protection standards consistent with this Policy. Each provider also maintains its own privacy documentation, which governs their broader data handling practices.

33kb bears no responsibility for the data practices, content, or privacy policies of any external website or service that is not part of the 33kb Platform. If you navigate away from the Platform to a third-party website, you do so at your own risk.

33kb reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered users via email to their registered address and via an in-platform notification at least 14 days before the changes take effect. Minor clarifications and non-material edits may be made without prior notice.

The version number and "Last updated" date at the top of this Policy will always reflect the most current version. We encourage you to review this Policy periodically to stay informed about how your data is protected. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

If you disagree with any changes made to this Policy, you have the right to close your account and request deletion of your personal data in accordance with Section 9 of this Policy. To do so, contact our support team via live chat or at [email protected] before the revised Policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 33kb handles your personal data, please reach out to our Data Support team using the contact details below. We are committed to responding to all data-related enquiries promptly and thoroughly.

• Email: [email protected]
• Live Chat: Available 24/7 directly on the 33kb Platform
• WhatsApp Support: Available 09:00–23:00 Bangladesh Standard Time (BST, UTC+6)
• Operational address: Dhaka, Bangladesh

When contacting us about a data rights request, please include your registered email address, your 33kb username, and a brief description of your request so that we can locate your records and verify your identity efficiently. We aim to acknowledge all data requests within 3 business days and to resolve them fully within 30 days.