Privacy of 33ba
At 33ba, your personal data is handled with the highest standards of care, transparency, and security. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold over your own data as a registered player on our platform.
256-Bit SSL Encryption
All data transmitted between your device and the 33ba platform is protected using industry-standard 256-bit SSL encryption. This ensures that personal details, payment information, and account credentials cannot be intercepted during transmission.
No Sale of Personal Data
33ba does not sell, rent, or trade your personal information to advertisers, data brokers, or any commercial third parties. Your data is used solely to operate, improve, and secure your 33ba account and gaming experience.
Minimal Data Collection
We collect only the data that is genuinely necessary to operate your account, process payments, verify your identity, and comply with anti-money laundering obligations. We do not collect data beyond what is required for these legitimate purposes.
Transparent Cookie Use
33ba uses cookies strictly for platform functionality, session management, fraud detection, and performance analytics. We do not use third-party advertising cookies or behavioural profiling cookies that track you across unrelated websites.
Secure Payment Data Handling
33ba does not store full card numbers, mobile wallet PINs, or full banking credentials on its servers. Payment data is processed exclusively by certified payment partners including bKash, Nagad, Rocket, and Visa/Mastercard processor networks.
1 Information We Collect
33ba collects personal information from you at various points during your use of the platform. The categories of information collected, and the circumstances under which each is collected, are set out below.
1.1 Registration Information
When you create a 33ba account, you are required to provide your chosen username, a valid email address, a date of birth, and a secure password. You may also be asked to provide your full legal name and a valid mobile phone number. This information is necessary to create and maintain your account, verify your age (18+ only), and communicate with you about your account activity.
1.2 Identity Verification (KYC) Documents
To comply with Know Your Customer (KYC) and anti-money laundering obligations, 33ba may request copies of government-issued identity documents, including but not limited to a National Identity Card (NID), passport, or driver's licence. Proof of address documents such as a utility bill or bank statement may also be requested. These documents are used solely for the purpose of verifying your identity and are handled with strict access controls.
1.3 Payment Information
When you make a deposit or request a withdrawal, 33ba collects transaction records including the payment method used (for example, bKash wallet number, Nagad number, Rocket account, or the last four digits of a Visa or Mastercard), transaction amounts in BDT or INR, timestamps, and transaction reference numbers. Full payment credentials are never stored on 33ba servers — they are handled exclusively by our certified payment processing partners.
1.4 Usage and Activity Data
33ba automatically collects data about how you interact with the platform, including the games you play, bet amounts and outcomes, session duration, pages visited, search queries within the platform, and bonus redemptions. This data is used to personalise your experience, detect irregular patterns indicative of fraud, and improve platform performance.
1.5 Technical and Device Data
When you access 33ba, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and general geographic location (derived from IP address at country or city level). This data is used for security monitoring, fraud prevention, and platform optimisation.
1.6 Communications Data
If you contact 33ba's support team by email or via in-platform live chat, we retain records of those communications, including the content of messages and any attachments you send. This enables our team to manage your enquiry effectively and maintain a history of interactions for quality assurance purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Email, username, date of birth, mobile number | Account creation & age verification |
| KYC Documents | NID, passport, proof of address | Identity verification & AML compliance |
| Payment Data | bKash number, last 4 card digits, transaction amounts | Deposit & withdrawal processing |
| Activity Data | Games played, bet history, session logs | Personalisation & fraud detection |
| Technical Data | IP address, device type, browser | Security monitoring & analytics |
| Communications Data | Support emails, live chat transcripts | Customer support & quality assurance |
2 How We Use Your Data
33ba processes your personal data only where we have a legitimate legal basis to do so. The purposes for which we use your data, and the corresponding legal basis for each, are described below.
- Account Management: We use your registration and profile data to create, maintain, and administer your 33ba account, including sending account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
- Age and Identity Verification: We are required to verify that all players are aged 18 or over before allowing real-money gambling activity. KYC documents are used exclusively for this purpose and for compliance with applicable anti-money laundering regulations.
- Payment Processing: Transaction data is used to process your deposits and withdrawal requests accurately and to maintain a complete and auditable transaction history associated with your account.
- Fraud Prevention and Security: Technical data, IP address information, and activity patterns are analysed to detect and prevent fraudulent account activity, money laundering, unauthorised access, and abuse of the bonus system.
- Platform Personalisation: Activity and usage data enables 33ba to tailor your experience, including showing relevant game recommendations and contextually appropriate promotional offers based on your demonstrated gaming preferences.
- Responsible Gaming: We monitor certain activity patterns — such as frequency of play, session length, and deposit velocity — to identify potential indicators of problem gambling. Where such indicators are present, our responsible gaming team may reach out proactively to offer support tools.
- Customer Support: Communications data is retained to manage your support requests effectively, provide consistent assistance, and maintain an accurate record of interactions for quality review purposes.
- Legal and Regulatory Compliance: We may process and retain your data as required to comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and resolve legal disputes.
- Service Improvement: Aggregated and anonymised usage analytics are used to understand how players interact with the platform, identify areas for improvement, and inform the development of new features.
Marketing Communications
33ba may send you promotional emails or in-platform notifications about bonuses, new games, and seasonal offers. You can opt out of marketing communications at any time by updating your notification preferences in your account settings, or by contacting [email protected]. Opting out of marketing will not affect the delivery of transactional account notifications.
3 Data Sharing & Third Parties
33ba does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share specific categories of data with carefully selected third parties where this is necessary for the operation of our platform, required by law, or necessary to protect the safety and integrity of our services. All third parties who process data on our behalf are bound by contractual obligations to handle that data securely and only for the purposes specified.
3.1 Payment Processors
To process BDT deposits and withdrawals, 33ba shares relevant transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, and card processing networks such as Visa and Mastercard. These providers receive only the minimum data necessary to execute your requested transaction. They operate under their own privacy policies and applicable financial sector data protection regulations.
3.2 Game Providers
Games on the 33ba platform are powered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive a pseudonymised player identifier and session token to facilitate game launches and record game outcomes. They do not receive your full name, email address, or payment details.
3.3 Identity Verification Services
To fulfil KYC obligations, 33ba may share identity document data with accredited third-party identity verification providers. These providers process your submitted documents to confirm authenticity and match against watchlist databases required under anti-money laundering frameworks. Verified document data is not used by these providers for any purpose beyond the scope of the verification service.
3.4 Analytics and Platform Infrastructure
33ba uses third-party infrastructure providers for hosting, content delivery, and platform analytics. These providers may process technical data such as IP addresses and usage statistics as part of delivering their services. All infrastructure partners are contractually obligated to process data only on 33ba's instructions.
3.5 Legal and Regulatory Disclosure
33ba may disclose personal data to competent legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in connection with the prevention or investigation of financial crime, fraud, or other serious legal matters. 33ba will, where lawfully permitted, notify affected players of such disclosures.
No Sale of Personal Data
Under no circumstances does 33ba sell, licence, or otherwise commercially exploit your personal data to advertisers, data brokers, marketing platforms, or any unaffiliated commercial third party. Any sharing of data is strictly limited to what is described in this section and is governed by formal data processing agreements.
5 Data Retention & Storage
33ba retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The specific retention periods we apply to each data category are guided by the following principles:
- Active Account Data: Personal data associated with an active 33ba account is retained for the full duration of your account relationship with the platform, plus a period of up to five (5) years following permanent account closure to satisfy anti-money laundering record-keeping obligations.
- KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, in accordance with applicable financial crime prevention requirements.
- Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of five (5) years to comply with financial record-keeping obligations.
- Support Communications: Customer support records are retained for a period of three (3) years from the date of the most recent interaction on a given support case.
- Analytics Data: Aggregated, anonymised analytics data that cannot be used to identify an individual player may be retained indefinitely for platform improvement purposes.
- Dormant Account Data: If your account is classified as dormant (no login activity for 12 consecutive months), your personal data is retained in accordance with the timelines above. You may request deletion of your account data at any time, subject to the overriding retention requirements described in this section.
Data Storage Location: 33ba's player data is stored on secure cloud infrastructure. Data is backed up regularly and access is restricted to authorised 33ba personnel and contracted third-party processors who require it to perform their designated functions.
Data Minimisation Commitment
When a retention period expires and no overriding legal obligation requires further storage, 33ba undertakes to securely delete or irreversibly anonymise the relevant data. We review our data holdings periodically to identify and remove data that is no longer required.
6 Your Data Rights
As a 33ba player, you hold meaningful rights over the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with your registered email address and a clear description of your request. We will acknowledge your request within two (2) business days and aim to resolve it within thirty (30) calendar days.
- Right of Access: You have the right to request a copy of the personal data that 33ba holds about you, along with information about how it is being used and with whom it has been shared. We will provide this information in a clear, structured format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For certain data fields, you may be able to make corrections directly through your account settings.
- Right to Erasure: You may request that 33ba delete your personal data. This right is subject to certain limitations — for example, we cannot delete data that we are legally required to retain for financial crime prevention or regulatory compliance purposes. Where deletion is possible, it will be carried out promptly.
- Right to Restriction of Processing: In certain circumstances — such as where the accuracy of data is disputed or where you object to processing — you may request that we restrict the use of your data while the matter is resolved.
- Right to Data Portability: Where technically feasible and where processing is based on your consent or the performance of a contract, you may request that your personal data be provided to you in a structured, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing where 33ba relies on legitimate interest as the legal basis, subject to 33ba demonstrating a compelling legitimate ground that overrides your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.
Identity Verification for Data Requests
To protect the security of your personal data, 33ba may ask you to verify your identity before processing a data rights request. This is a precautionary measure to ensure that personal data is not disclosed to, or deleted at the request of, an unauthorised party. We will not charge a fee for processing legitimate data rights requests.
7 Data Security Measures
33ba implements a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.
- Encryption in Transit: All data exchanged between your browser or mobile device and the 33ba platform is encrypted using TLS 1.2 or higher (256-bit SSL). This protects login credentials, payment data, and all other sensitive communications from interception.
- Encryption at Rest: Sensitive data fields stored in 33ba's databases — including identity document metadata, payment references, and account credentials — are encrypted at rest using strong encryption standards. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to periodic review. Multi-factor authentication is required for all privileged system access.
- Fraud Detection Systems: 33ba operates automated real-time fraud detection systems that monitor account activity, transaction patterns, and login behaviour for indicators of unauthorised access or financial crime. Anomalies trigger alerts for review by our security team.
- Third-Party Security Standards: All third-party providers who process data on behalf of 33ba are required to maintain information security standards consistent with industry best practices as a condition of their data processing agreements.
- Incident Response: In the event of a confirmed personal data breach that is likely to result in risk to affected individuals, 33ba will notify impacted players and relevant authorities within the timeframes required by applicable law, and will take prompt remedial action to contain and assess the breach.
While 33ba takes all reasonable and practicable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. You play an important role in protecting your own account by using a strong, unique password for your 33ba account, enabling any available two-factor authentication features, and reporting any suspected unauthorised access to [email protected] immediately.
8 Policy Updates & Contact
33ba reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email to the address on file, or via a prominent in-platform notice, at least seven (7) calendar days before the updated policy takes effect.
The "Effective Date" shown at the top of this policy and in the hero section above indicates the date on which the currently published version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how your data is being handled. The most current version of this policy is always available at 33ba.app/privacy-policy.
If you have any questions, concerns, or complaints about how 33ba handles your personal data, or if you wish to exercise any of the data rights described in Section 6, please contact our data support team using the following details:
- Email: [email protected]
- Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
- Response Time: Acknowledgement within 2 business days; resolution within 30 calendar days
If you are not satisfied with our response to a data-related complaint, you may have the right to escalate the matter to an appropriate data protection authority in your jurisdiction. 33ba will cooperate fully with any lawful regulatory enquiry into our data processing practices.
This Privacy Policy applies exclusively to data processed by 33ba through the 33ba.app platform. It does not govern the privacy practices of any third-party websites, game providers, or payment services that you may access via links or integrations on the 33ba platform. We encourage you to review the privacy policies of any third-party services you use in connection with your 33ba account.
Minors and Data Privacy
The 33ba platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided personal data to 33ba, please contact us immediately at [email protected] and we will take prompt steps to delete the data and close the associated account.
Your Privacy Is Our Priority
Now that you understand how 33ba protects your data, you can play with confidence. Explore our full game library, review our full terms, or log in to your account.