33hb Privacy Policy

This Privacy Policy ("Policy") describes how 33hb ("33hb", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal information of individuals ("Player", "User", "you") who access or use the 33hb online betting and casino platform available at 33hb.io and any associated mobile applications or services. This Policy forms part of 33hb's broader legal framework, which includes the Terms & Conditions and the Responsible Gaming Policy.

By creating a 33hb account, accessing the platform, or interacting with any 33hb service, you acknowledge that you have read and understood this Policy, and that you consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

33hb is committed to maintaining the highest practical standards of personal data protection. Our approach to privacy is aligned with internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR), which we apply as a baseline across all markets including Bangladesh.

Introduction

1.1 Who We Are. 33hb is an international online sports betting and casino platform serving players primarily in Bangladesh and other English-speaking markets where online gaming is accessible. The platform provides cricket betting, live casino games, slots, virtual sports, and related promotional services to registered adult players aged 21 years and above.

1.2 Scope of This Policy. This Policy applies to all personal data collected through: the 33hb.io website; any mobile-optimised version of the site; account registration and verification processes; deposit and withdrawal transactions; customer support interactions via live chat, email, or any other communication channel; and participation in promotions, tournaments, or loyalty programmes run by 33hb.

1.3 Data Controller. For the purposes of applicable data protection law, 33hb is the data controller in respect of the personal data it collects and processes about you. As data controller, 33hb determines the purposes and means of the processing of your personal data. All enquiries regarding 33hb's exercise of its data controller responsibilities should be directed to [email protected].

1.4 Age Requirement. 33hb's services are strictly available to individuals aged 21 years or older. 33hb does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. See Section 10 for our full policy on children and minors.

Data We Collect

2.1 Registration Data. When you create a 33hb account, we collect the following categories of personal information:

• Full legal name as it appears on your official government-issued identity document
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postcode
• Email address and mobile phone number
• Username and encrypted password (passwords are never stored in plain text)
• Preferred currency (Bangladeshi Taka / BDT)

2.2 Identity Verification (KYC) Data. To comply with our Know Your Customer obligations and prevent underage gambling and financial crime, we may collect:

• Copy of National Identity Card (NID), passport, or other government-issued photo ID
• Proof of address document (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of registered bKash or Nagad account showing your name and number)
• Selfie photograph or video for facial verification, where required by our verification provider

2.3 Financial Transaction Data. Every deposit and withdrawal transaction generates a record that includes: transaction date and time (Bangladesh Standard Time, UTC+6); transaction amount in BDT (৳); payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard); transaction reference numbers; and account balance snapshots before and after the transaction.

2.4 Betting & Gaming Activity Data. We maintain a complete record of your activity on the 33hb platform, including: all bets and wagers placed, including stake, odds, market, event, and outcome; all casino game rounds played, including game title, studio provider, bet amount, and result; session start and end times; live casino interactions; and bonus and promotion claims and fulfilment records.

2.5 Technical & Device Data. When you access 33hb, our systems automatically collect technical data including: IP address and approximate geolocation derived from IP; device type, operating system, and browser version; unique device identifiers; referring URL and pages visited within the platform; session duration and clickstream data; and error logs and crash reports.

2.6 Communication Data. We retain records of all communications between you and 33hb, including live chat transcripts, support emails, and any written correspondence. These records are retained for quality assurance, training, and dispute resolution purposes.

2.7 Marketing Preferences. Where you have opted in to receive promotional communications, we record your marketing preferences and the history of communications sent to you. You may withdraw your consent to marketing communications at any time by contacting [email protected].

How We Use Your Data

3.1 33hb uses the personal data it collects for the following primary purposes:

3.2 Automated Decision-Making. 33hb uses automated systems to detect suspicious account activity, identify potential bonus abuse, flag transactions for anti-money laundering review, and monitor for signs of problem gambling behaviour. Where an automated decision materially affects your account — such as a temporary suspension pending review — you have the right to request human review of that decision by contacting [email protected].

3.3 Responsible Gaming. 33hb processes your betting activity data specifically to fulfil its responsible gaming obligations. This includes monitoring for changes in gambling patterns, identifying accounts that may display signs of problem gambling, and proactively offering responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion. This processing is carried out in your vital interest and in the public interest.

Legal Basis for Processing

4.1 33hb processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and 33hb — i.e., to provide the betting and gaming services you have signed up for, including account management, transaction processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) mandates, and age verification obligations under applicable gaming law.
• Legitimate Interests: Processing carried out for 33hb's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics to improve platform performance — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of marketing communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.
• Vital Interests: In limited circumstances, we may process data to protect your vital interests — for example, where responsible gaming concerns suggest a risk of serious financial harm.

Data Sharing & Disclosure

5.1 No Sale of Data. 33hb does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Any sharing of personal data is strictly limited to what is necessary for the operation of the 33hb platform and compliance with legal obligations.

5.2 Service Providers. 33hb shares personal data with carefully selected third-party service providers who assist in the operation of the platform, including:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — to process your financial transactions
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age
• Game content studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Ezugi, Spribe, and other licensed studio partners — strictly limited to session and game interaction data necessary to deliver game content
• Cloud infrastructure providers: Hosting and data storage providers operating under strict data processing agreements
• Customer support platforms: Third-party live chat and ticketing systems used to deliver 24/7 English support
• Analytics providers: Platform analytics tools used to understand user behaviour and improve the 33hb experience, operating on aggregated or pseudonymised data where possible

5.3 Legal Disclosures. 33hb may disclose your personal data to law enforcement authorities, regulatory bodies, or other public institutions where required to do so by applicable law, a valid court order, or a legitimate regulatory request. Where legally permitted, 33hb will notify you of such a disclosure.

5.4 Business Transfers. In the event that 33hb undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is processed as a result.

5.5 Data Processing Agreements. All third-party service providers who receive personal data from 33hb are required to enter into a formal data processing agreement that obligates them to process your data solely for the purpose for which it was shared, to maintain appropriate security standards, and to delete or return the data upon termination of the service relationship.

Data Retention

6.1 33hb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

6.2 Where an account is closed at your request, 33hb will begin the data deletion process within 30 days of account closure confirmation, subject to any applicable retention obligations listed above. Data required to be retained by law will be held in a restricted-access archive and will not be used for any operational purpose during the retention period.

Security Measures

7.1 Encryption. All personal data transmitted between your device and the 33hb platform is protected using industry-standard TLS 1.2 or higher encryption. Data stored on 33hb's servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Passwords are hashed using a strong one-way hashing algorithm and are never stored or transmitted in plain text.

7.2 Access Controls. Access to personal data within 33hb's internal systems is governed by a strict role-based access control (RBAC) framework. Only authorised personnel with a demonstrated operational need are granted access to personal data. All access events are recorded in a tamper-evident audit log. Privileged access accounts are subject to multi-factor authentication (MFA) requirements.

7.3 Infrastructure Security. 33hb's platform infrastructure is hosted in ISO 27001-certified data centres with physical access controls, redundant power supplies, and continuous network monitoring. Our systems are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services.

7.4 Vulnerability Management. 33hb conducts regular penetration testing and vulnerability assessments of its platform and infrastructure. Critical and high-severity vulnerabilities are remediated within defined SLA timeframes. Our development team follows secure coding practices and code review procedures before any changes are deployed to production.

7.5 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 33hb will notify affected players without undue delay and, where required, report the breach to the relevant supervisory authority within 72 hours of becoming aware of it. Notification will describe the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures taken or proposed to address the breach.

7.6 Your Responsibility. While 33hb takes all reasonable technical and organisational measures to protect your personal data, the security of your account also depends on you. You are responsible for keeping your 33hb login credentials confidential, using a strong and unique password, and logging out of your account when using shared or public devices. 33hb will never ask you to share your password via email, live chat, or any other channel. If you suspect your account has been compromised, contact [email protected] immediately.

Cookies & Tracking Technologies

8.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. 33hb uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate the platform, remember your preferences, and understand how players interact with our services.

8.2 Types of Cookies We Use.

8.3 Managing Cookies. You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling essential or security cookies may prevent you from accessing certain features of the 33hb platform, including logging in to your account. Instructions for managing cookies can be found in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.).

8.4 Third-Party Cookies. Some third-party services integrated into the 33hb platform — including analytics providers and game content studios — may set their own cookies on your device. These cookies are governed by the respective third party's privacy policy. 33hb does not control third-party cookies and recommends reviewing the privacy policies of relevant partners.

8.5 Do Not Track. Some browsers include a "Do Not Track" (DNT) signal. 33hb currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how platforms should respond to such signals. We will update this policy if industry standards change.

Your Rights

9.1 Subject to applicable data protection law and any overriding legal obligations on 33hb, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".

9.2 Response Timeframes. 33hb will acknowledge all data rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and aim to provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case 33hb will notify you of the extension and the reason for it.

9.3 Identity Verification for Rights Requests. To protect the security of your data, 33hb may require you to verify your identity before processing a data rights request. This verification may involve confirming account details, providing a copy of your identity document, or completing a one-time verification step via the email address registered on your account.

Children & Minors

10.1 The 33hb platform is strictly prohibited from being used by any person under the age of 21. We do not knowingly collect, store, or process personal data relating to children or minors. The minimum age requirement of 21 years is enforced through our KYC identity verification process, which requires all players to submit valid proof of identity and date of birth before a withdrawal can be processed or, where risk-based assessment warrants it, before deposits are permitted.

10.2 If 33hb discovers or is notified that personal data has been collected from a person who is under the age of 21, we will: immediately suspend the relevant account pending investigation; delete all personal data associated with that account to the extent not required to be retained by law; reverse any financial transactions associated with the account in accordance with our terms and applicable payment processor rules; and report the matter to the relevant authorities if required.

10.3 If you are a parent or guardian and believe that your child may have accessed or registered on the 33hb platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We treat all such reports as the highest priority and will act on them within one business day.

International Data Transfers

11.1 33hb operates internationally and may process and store your personal data on servers located outside of Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, 33hb ensures that appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Binding corporate rules where applicable within the 33hb group
• Data processing agreements that impose GDPR-equivalent data protection obligations on all recipients

11.2 All third-party service providers and data processors engaged by 33hb — including payment partners such as bKash and Nagad, game content studios, and cloud infrastructure providers — are contractually required to maintain the same level of data protection as 33hb itself, regardless of where they are based.

11.3 If you have questions about the specific safeguards in place for international transfers of your personal data, you may request further information by contacting [email protected].

Policy Updates & Contact

12.1 Policy Updates. 33hb reserves the right to update this Privacy Policy at any time. When we make material changes — such as changes to how we use your personal data, changes to your rights, or changes to our data sharing practices — we will provide at least 7 days' advance notice by sending an email to the address registered on your 33hb account and/or by posting a prominent notice on the platform. Non-material updates (such as typographical corrections or clarifications that do not change the substance of the policy) may take effect immediately without prior notice. The "Last Updated" date at the top of this document will always reflect the most recent revision.

12.2 Continued Use. Your continued use of the 33hb platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must stop using the platform and may request account closure by contacting [email protected].

12.3 Privacy Contact. For all questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the 33hb privacy team:

12.4 Related Policies. This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together form the complete legal framework governing your relationship with 33hb.