33ba Privacy Policy

1 Who We Are

33ba is an online sports betting and casino entertainment platform accessible at https://33ba.io, operated and maintained for players based in Bangladesh. References to "33ba", "we", "us", or "our" in this Privacy Policy refer to the operator of the 33ba platform.

For the purposes of data protection, 33ba acts as the data controller in respect of personal data collected from players registered on the platform. This means we determine the purposes and means by which your personal data is processed. Where 33ba engages third-party service providers to process data on our behalf, those providers act as data processors subject to written data processing agreements.

Questions, requests, and complaints relating to this Privacy Policy should be directed to our support team at [email protected] (plain text — not a link). We aim to respond to all privacy-related inquiries within 30 calendar days.

2 Data We Collect

33ba collects personal data in several categories depending on the nature of your interaction with the platform. The following table outlines the categories of data collected and their primary purpose:

We do not collect or store full payment card numbers. Card payments are processed through certified third-party payment gateways that are PCI-DSS compliant. 33ba receives only tokenised references and masked card details.

3 How We Collect Your Data

33ba collects personal data through the following channels:

• Direct registration: When you create a 33ba account via the 33ba Login page, you voluntarily provide identity and contact data.
• KYC submission: When you upload identity documents in response to a verification request, those documents and the data extracted from them are collected and stored.
• Payment transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, financial transaction data is collected.
• Platform usage: As you navigate the 33ba platform — browsing markets, placing bets, playing casino games, or accessing your account — technical and behavioural data is collected automatically via server logs and analytics tools.
• Customer support interactions: When you contact 33ba via live chat, email, or phone, the content of those communications is collected and stored as part of your account record.
• Cookies and tracking technologies: When you visit the 33ba website, cookies and similar technologies collect certain technical and behavioural data as described in Section 7 of this Policy.

4 Legal Basis for Processing

33ba processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and 33ba — including account creation, bet settlement, payment processing, and withdrawal handling — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable law — including KYC identity verification, anti-money laundering (AML) record-keeping, and age verification — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of 33ba's legitimate business interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications (where applicable) and the use of non-essential cookies is carried out on the basis of your freely given, informed consent. You may withdraw consent at any time by contacting [email protected].

5 How We Use Your Data

33ba uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your 33ba account, including the 33ba Login authentication process and OTP verification.
• To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method.
• To verify your identity and age (21+ requirement) as part of our KYC compliance obligations.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• To monitor your betting and gaming behaviour for responsible gaming purposes, including identifying patterns associated with problem gambling and applying protective measures where necessary.
• To settle bets and resolve disputes regarding game outcomes, transaction records, and account balances.
• To communicate with you about your account, including sending OTP codes, transaction confirmations, verification requests, and material policy updates.
• To provide customer support and handle complaints in accordance with our formal complaints procedure.
• To improve the performance, security, and user experience of the 33ba platform based on aggregated usage analytics.
• To send promotional communications about 33ba offers, bonuses, and events — only where you have provided separate consent for marketing communications and have not subsequently withdrawn that consent.

33ba does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players without human review, except as necessary for real-time fraud detection systems where immediate automated action is required to protect the integrity of the platform.

6 Sharing Your Data

33ba does not sell your personal data to third parties for their own marketing purposes. Your personal data may be shared with the following categories of recipients only to the extent necessary and only for the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive the financial data necessary to process your transactions. These providers are contractually bound to handle your data securely and only for payment processing purposes.
• Identity verification providers: Third-party KYC and identity verification services may receive your identity documents and personal details for the sole purpose of conducting verification checks on 33ba's behalf.
• Game providers: Providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session and account reference data necessary to deliver their games within the 33ba platform. These providers do not receive your full personal profile.
• Fraud and security providers: Anti-fraud and cybersecurity service providers may receive technical data (IP addresses, device fingerprints, session data) for the purpose of protecting the platform from fraudulent access and abuse.
• Legal and regulatory authorities: 33ba may be required by law to disclose personal data to government bodies, law enforcement agencies, or financial intelligence units in connection with AML investigations, court orders, or other legally compelled disclosures. Such disclosures will be made only to the extent required and, where legally permitted, you will be notified.
• Professional advisers: Lawyers, auditors, and accountants engaged by 33ba may access personal data to the extent necessary to provide their professional services, subject to confidentiality obligations.

7 Cookies & Tracking Technologies

33ba uses cookies and similar technologies on the 33ba website to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

Strictly necessary cookies are placed without requiring your consent as they are essential for the platform to function. Functional and analytics cookies are placed only with your consent. You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features, including the 33ba Login process.

33ba does not use third-party advertising cookies or cross-site tracking cookies that build advertising profiles about you across unrelated websites.

8 Data Retention

33ba retains personal data only for as long as necessary for the purpose for which it was collected, or as required by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active 33ba account, plus a minimum of 5 years following permanent account closure, to satisfy AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction in compliance with applicable financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Betting and gaming history: Retained for 5 years from the date of the relevant betting or gaming activity, and for longer periods where required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for 3 years from the date of the interaction, unless the communication relates to a formal complaint in which case it is retained for 5 years.
• Technical and log data: Retained for up to 12 months in active systems and for up to 36 months in security-focused archive logs.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

9 Your Rights

As a registered 33ba player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request — [Your Username]".

• Right of Access: You have the right to request a copy of the personal data 33ba holds about you, together with information about how and why it is being processed.
• Right to Rectification: If any personal data 33ba holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right does not apply where 33ba is required to retain data by law (e.g., AML obligations) or where retention is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restrict Processing: You may request that 33ba restrict the processing of your personal data in certain situations — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request its transfer to another controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of 33ba's legitimate interests. 33ba will cease processing unless it can demonstrate compelling legitimate grounds that override your interests or that processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children & Minors

The 33ba platform is strictly intended for adults aged 21 and above. 33ba does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the 33ba account registration process, and 33ba reserves the right to request documentary proof of age at any time.

If 33ba becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration of age at registration or through any other means — the account will be immediately suspended, all associated funds will be frozen pending review, and the personal data will be deleted to the extent permitted by law.

11 Security Measures

33ba implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• TLS/SSL encryption: All data transmitted between your browser or device and the 33ba servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Encryption at rest: Sensitive personal data stored in 33ba's databases — including identity documents and financial data — is encrypted using AES-256 or equivalent standards.
• Access controls: Personal data is accessible only to authorised 33ba personnel who require it for legitimate business purposes. All access is role-based and subject to the principle of least privilege.
• OTP authentication: The 33ba Login process includes OTP-based two-factor authentication to protect your account from unauthorised access.
• Intrusion detection: 33ba's platform is monitored continuously for anomalous access patterns, suspicious activity, and potential security incidents.
• Penetration testing: 33ba conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and interests, 33ba will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

While 33ba takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 33ba Login credentials and for ensuring that you access the platform only from trusted, secure devices.

12 Third-Party Links

The 33ba platform may contain references to third-party game providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) whose game interfaces are loaded within the 33ba environment. These providers operate under their own privacy policies, which govern how they handle any data generated within their game sessions.

33ba is not responsible for the privacy practices of third-party game providers or any other external services. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with the 33ba platform. 33ba does not control the data practices of these providers beyond the contractual data processing agreements in place between 33ba and each provider.

13 Changes to This Privacy Policy

33ba reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address on file and/or by displaying a prominent notice on the platform at the time of 33ba Login, no fewer than 7 days before the changes take effect.

The "Last Updated" date at the top of this document indicates when this version of the Privacy Policy was published. By continuing to use the 33ba platform after the effective date of any update, you acknowledge and accept the revised Policy. If you do not agree with any material change, you may request withdrawal of your available balance and closure of your account by contacting [email protected] prior to the effective date.

We recommend that you review this Privacy Policy periodically to stay informed about how 33ba protects your personal data. The current version is always accessible from the footer of every page on the 33ba website.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 33ba processes your personal data, please contact our data protection team using the details below:

• Email: [email protected] (plain text — not a link)
• Subject Line for Data Requests: "Data Subject Request — [Your 33ba Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your 33ba Username]"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: All privacy-related inquiries are acknowledged within 3 business days and fully resolved within 30 calendar days.