Privacy Policy for 33eg

1. Who We Are

This Privacy Policy is issued by 33eg ("33eg", "the Company", "we", "us", "our"), the operator of the online betting and gaming platform available at https://33eg.io ("the Platform"). 33eg is an internationally licensed online betting operator serving the Bangladesh market and other permitted jurisdictions.

For the purposes of this Privacy Policy, 33eg acts as the data controller in respect of all personal information collected from registered players and visitors to the Platform. This means that 33eg determines the purposes for which your personal data is processed and the manner in which that processing takes place.

If you have any questions about this Privacy Policy or about how 33eg handles your personal data, please contact our Data Protection team at [email protected]. All data-related inquiries are handled in English and are responded to within 30 calendar days.

2. Personal Data We Collect

2.1 Registration Data

When you create a 33eg account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, mobile phone number, and a username of your choosing. This data is required to establish and maintain your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) and anti-money laundering obligations, 33eg may request copies of identity and address verification documents. These may include a National Identity Card (NID), passport, driving licence, or a recent bank statement or utility bill. Documentary data is processed solely for identity verification and regulatory compliance purposes and is stored in an encrypted format.

2.3 Financial Data

When you make a deposit or request a withdrawal, 33eg collects transaction data necessary to process the payment. This includes your bKash, Nagad, Rocket, or Upay mobile wallet number, bank account details (where applicable), transaction reference numbers, deposit and withdrawal amounts, and transaction timestamps. 33eg does not store full credit or debit card numbers on its own servers — card payments are processed by licensed third-party payment service providers via secure, tokenised connections.

2.4 Usage and Activity Data

33eg automatically records data about your use of the Platform. This includes login timestamps, pages visited, games played, bet amounts and outcomes, session duration, device type and model, operating system, browser type and version, screen resolution, IP address, and approximate geographic location derived from your IP address. This data is used for Platform optimisation, fraud prevention, and responsible gambling monitoring.

2.5 Communications Data

When you contact 33eg through live chat, email, or WhatsApp, we retain records of those communications including the content of messages, timestamps, and the support agent's responses. This information is used to resolve your inquiry, improve service quality, and maintain a record of your interaction history with us.

2.6 Preference Data

33eg may collect information about your preferences on the Platform, including your preferred deposit method, preferred gaming categories, language settings, marketing communication preferences, and responsible gambling tool settings such as deposit limits and session time alerts. This data is used to personalise your experience and to monitor compliance with your self-imposed gambling controls.

The categories of personal data we collect are summarised in the table below:

3. How We Collect Your Data

33eg collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your profile settings.
• Automatically: Technical and usage data collected automatically when you access and navigate the Platform, through server logs, cookies, and similar tracking technologies as described in Section 6.
• From third parties: Identity verification data confirmed by licensed KYC service providers; fraud screening data from fraud prevention agencies; payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners; and, where applicable, geolocation data from IP intelligence services used to enforce jurisdictional restrictions.

33eg does not purchase personal data lists from third-party marketing databases and does not collect personal data from social media platforms without your explicit consent.

4. How We Use Your Personal Data

33eg uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your 33eg player account, verifying your identity and age, processing password resets, and managing account security settings.
• Service delivery: Enabling you to place bets, play casino games, participate in promotions, and use all features of the Platform.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer methods; reconciling transaction records; and investigating disputed payments.
• Regulatory compliance: Fulfilling our KYC, anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gambling obligations under applicable international licensing requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, bot activity, and other conduct that violates our Terms and Conditions.
• Responsible gambling: Monitoring your play patterns for indicators of problem gambling behaviour; administering deposit limits, cool-off periods, and self-exclusion tools you have activated; and contacting you proactively if our monitoring systems flag a concern.
• Customer support: Responding to your inquiries, resolving disputes, and maintaining records of your support interactions.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. This may include seasonal promotions during Eid, Durga Puja, Pohela Boishakh, and major cricket tournaments such as the Bangladesh Premier League (BPL) and IPL. You may withdraw marketing consent at any time.
• Platform improvement: Analysing aggregated usage data to identify technical issues, optimise game performance, and improve the overall user experience on the Platform.
• Legal proceedings: Using or disclosing your data where required to comply with a court order, regulatory investigation, or other legal obligation.

5. Legal Bases for Processing

33eg processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 33eg — specifically, to operate your player account, process bets, and handle payments.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, CTF, and responsible gambling obligations imposed by our operating licence.
• Legitimate interests: Processing carried out for the legitimate business interests of 33eg, including fraud prevention, Platform security, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, specifically in relation to marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and remember certain information about your session and preferences. 33eg uses cookies and similar technologies including local storage objects and session tokens.

6.2 Cookies Used by 33eg

The following categories of cookies are used on the 33eg Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in during a gaming session and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings, preferred deposit method, and responsible gambling tool configurations. Disabling these may affect Platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about how users navigate the Platform. This data helps 33eg identify performance issues and improve the user experience. 33eg uses self-hosted analytics tools; your data is not shared with third-party analytics platforms.
• Fraud prevention cookies: Used to identify and flag suspicious device behaviour, including the detection of automation tools, VPN usage, and patterns consistent with account takeover attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your account. For full details of the cookies in use and their retention periods, please contact [email protected].

7. Sharing Your Personal Data

33eg does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of trusted third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the financial data necessary to process your transactions. These providers are independently licensed and operate their own privacy policies.
• Identity verification providers: Licensed KYC and AML screening services that help us verify your identity, confirm your age, and screen against financial crime watchlists.
• Fraud prevention agencies: Third-party services that assist 33eg in detecting and preventing fraudulent transactions, account takeovers, and other security threats.
• Game content providers: Where technically required for game integration, limited session data may be shared with licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers access only the session data required to render and validate your gameplay, not your full profile.
• Regulatory and law enforcement authorities: 33eg may disclose personal data to competent authorities when required by law, court order, or regulatory directive. Where legally permissible, 33eg will inform you of any such disclosure.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations and access data only as required to provide professional services to 33eg.

8. International Data Transfers

As an internationally licensed platform, 33eg may store and process your personal data in countries outside Bangladesh. Where data is transferred outside your country of residence, 33eg ensures that appropriate safeguards are in place to protect your personal information to a standard equivalent to that required by applicable data protection laws. These safeguards may include data processing agreements incorporating standard contractual clauses, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

If you wish to obtain further information about the international transfer mechanisms used by 33eg in respect of your personal data, please contact us at [email protected].

9. Data Retention

33eg retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained throughout the period your account is active and in use.
• Post-closure data: Following the closure or suspension of your account, 33eg retains your identity, financial, and transaction records for a minimum of five years in compliance with anti-money laundering and regulatory record-keeping obligations.
• Customer support records: Retained for a minimum of three years from the date of the last interaction to support dispute resolution and service quality review.
• Marketing consent records: Retained for as long as necessary to demonstrate compliance with consent requirements, and for a reasonable period after you withdraw consent.
• Technical and usage logs: Typically retained for 12 months, unless a longer retention period is required for security investigation or fraud prevention purposes.

When personal data is no longer required, it is securely deleted or anonymised in accordance with 33eg's internal data disposal procedures.

10. Security Measures

33eg implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and 33eg servers is encrypted in transit using industry-standard TLS protocols.
• Encryption at rest: Sensitive personal and financial data stored on 33eg servers is encrypted using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations and receive regular data protection training.
• Intrusion detection: 33eg employs real-time monitoring tools to detect and respond to potential security incidents, including unauthorised login attempts, unusual transaction patterns, and suspicious API activity.
• Regular security audits: The Platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a material risk to your rights, 33eg will notify affected users as required by applicable law and will take immediate steps to contain and investigate the incident.

11. Your Data Rights

Depending on your jurisdiction, you may have the following rights in relation to the personal data 33eg holds about you:

• Right of access: You may request a copy of the personal data 33eg holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that 33eg delete your personal data. Note that this right is subject to limitations where retention is required for legal or regulatory compliance purposes.
• Right to restriction: You may request that 33eg restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that 33eg provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on 33eg's legitimate interests, including the use of your data for direct marketing purposes, at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise any of these rights, please submit a request by email to [email protected] with the subject line "Data Rights Request". 33eg will respond to all valid requests within 30 calendar days. We may ask you to provide proof of identity before processing your request to protect against unauthorised access to your data.

12. Children's Privacy

The 33eg Platform is strictly intended for adults aged 21 years and above. 33eg does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, void all associated activity, and securely delete or return the relevant personal data. If you believe that a person under 21 may have registered on the Platform, please contact us immediately at [email protected].

13. Third-Party Links and Services

The 33eg Platform may contain references to third-party services, such as payment processors and game content providers. While 33eg takes care to work with reputable partners, we have no control over the privacy practices of third-party websites or services and are not responsible for their content or data handling. This Privacy Policy applies solely to the 33eg Platform. We encourage you to review the privacy policies of any third-party services you use in connection with your 33eg account, including those of your mobile wallet provider (bKash, Nagad, Rocket, or Upay).

14. Updates to This Privacy Policy

33eg reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least 7 days before the changes come into effect. The effective date at the top of this document will be updated accordingly.

We encourage you to review this Privacy Policy regularly to stay informed about how 33eg protects your data. Continued use of the Platform after the effective date of any update constitutes your acknowledgment of the revised policy.

All previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 33eg handles your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 within your 33eg account dashboard — the fastest channel for privacy-related inquiries.
• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" for faster routing.
• WhatsApp: +880 1800 000000 — available 24 hours a day, Bangladesh Standard Time (UTC+6).

33eg is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction in which you reside.