33bat Privacy Policy

1.1 Registration data. When you create a 33bat account, we collect your full legal name, date of birth, gender, residential address, email address and a Bangladeshi mobile number capable of receiving SMS verification codes. This information is required to establish your identity and comply with applicable know-your-customer (KYC) obligations.

1.2 Identity verification documents. To complete the KYC process required before your first withdrawal, we collect scanned or photographed copies of government-issued identity documents such as your National Identity Card (NID), passport or driving licence. Where required, we may also collect proof of residential address in the form of a utility bill, bank statement or government correspondence dated within 90 days.

1.3 Financial data. We collect payment method information including your bKash account number, Nagad account number, Rocket (Dutch-Bangla Bank) number, Upay number or bank account details where used for deposits and withdrawals. We also retain records of all transaction amounts, dates, reference numbers and statuses for regulatory and audit purposes. We do not store full card numbers; card transactions are tokenised by our payment processing partners.

1.4 Usage and behavioural data. We collect information about how you interact with the 33bat platform including pages visited, games played, bet amounts and frequencies, session durations, search queries entered on the site, and features accessed. This data is used for platform improvement, personalisation and responsible gaming monitoring.

1.5 Technical and device data. When you access 33bat, our servers automatically log your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL and time zone. This information is used for security monitoring, fraud prevention and performance optimisation.

1.6 Communications data. If you contact our support team by email or live chat, we retain the content of those communications together with any attachments, your account reference and the date and time of contact. This allows us to handle follow-up queries efficiently and maintain a consistent support experience.

1.7 Voluntary survey and preference data. From time to time 33bat may invite you to participate in optional satisfaction surveys or to specify game preferences for personalisation purposes. Participation is entirely voluntary; declining does not affect your account status or access to any platform feature.

2.1 Account creation and operation. We use your registration data to create and maintain your 33bat account, authenticate your identity at login, send account-related notifications (deposit confirmations, withdrawal updates, security alerts), and administer the contractual relationship between you and 33bat.

2.2 Payment processing. Financial data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay and bank transfer, to reconcile transaction records against our internal ledger, and to investigate any disputed transactions or payment failures you report to our support team.

2.3 Identity and age verification. Document data collected during KYC verification is used exclusively to confirm that you are who you say you are, that you are 21 years of age or older, and that the funds in your account originate from a legitimate source consistent with anti-money laundering requirements. Verified document images are stored in encrypted form and accessed only by authorised compliance personnel.

2.4 Responsible gaming monitoring. We analyse your usage and behavioural data — including betting frequency, session length, deposit velocity and withdrawal patterns — to identify indicators of problem gambling at an early stage. Where such indicators are detected, our responsible gaming team may reach out to offer support tools such as deposit limits, session reminders or self-exclusion options.

2.5 Fraud prevention and security. Technical and device data, together with transactional records, are analysed by our security systems to detect and prevent unauthorised account access, multiple-account fraud, bonus abuse, money laundering and other prohibited conduct described in our Terms & Conditions.

2.6 Platform improvement and personalisation. Aggregated and anonymised usage data informs decisions about new game additions, user interface improvements and promotional scheduling. Where personalisation features are active, we may use your game history to suggest content we believe you will find relevant — you can opt out of personalisation via your account settings.

2.7 Marketing communications. If you have opted in to marketing communications during registration or through your account preferences, we may send you promotional emails and SMS messages about bonuses, upcoming BPL or IPL cricket betting markets, new slot releases and seasonal promotions tied to events such as Eid or Pohela Boishakh. You may withdraw your marketing consent at any time by contacting [email protected] or by following the unsubscribe link in any marketing email.

2.8 Legal and regulatory compliance. We are required by applicable law to retain certain categories of data for minimum statutory periods and to make that data available to competent authorities upon receipt of a lawful request. In such cases, your data may be disclosed to regulatory bodies, law enforcement agencies or courts without prior notice to you where disclosure is required or permitted by law.

3.1 33bat does not sell or rent personal data to any third party. We share your data only in the limited circumstances described in this section, and only to the minimum extent necessary for the stated purpose.

3.2 Payment service providers. To process deposits and withdrawals, we share relevant transaction data with our payment partners including bKash, Nagad, Dutch-Bangla Bank (Rocket), Upay (United Commercial Bank) and international card scheme processors. These partners receive only the data necessary to execute and confirm the transaction. They are contractually prohibited from using your data for any purpose other than payment processing.

3.3 Identity verification services. Where we use a third-party electronic KYC or document verification service to assist with identity checks, we share the identity documents and personal details you submit during the verification process with that provider. All such providers are contractually bound to handle your data securely and in accordance with their own published privacy policies.

3.4 Game software providers. To deliver casino and sports betting services, 33bat integrates game engines from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive your account reference number and session token to authenticate your game session. They do not receive your full identity documents, payment details or contact information.

3.5 Fraud prevention and security vendors. We may share IP addresses, device fingerprints and transaction metadata with specialist fraud detection vendors to identify and block suspicious activity. These vendors process data only on our instruction and may not use it for their own commercial purposes.

3.6 Legal and regulatory disclosure. We may disclose your personal data to law enforcement agencies, regulators, courts or other competent public authorities where we are under a legal obligation to do so, or where disclosure is necessary to protect the rights, property or safety of 33bat, our players or the general public.

3.7 Business transfers. In the event that 33bat undergoes a merger, acquisition, restructuring or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email of any such transfer and of any material changes to data handling that result from it.

4.1 A cookie is a small text file placed on your device when you visit a website. Cookies allow the site to recognise your device on subsequent visits and to maintain state information such as your login session. 33bat uses the following categories of cookies:

4.2 Strictly necessary cookies. These cookies are essential for the 33bat platform to function. They maintain your authenticated login session, remember your language preference and ensure that the security features of the platform operate correctly. Strictly necessary cookies cannot be disabled without impairing the functionality of the site.

4.3 Performance and analytics cookies. We use first-party analytics cookies to understand aggregate patterns of how players navigate the 33bat platform — which pages are most visited, where players encounter errors, and how long typical sessions last. This data is collected in aggregated, anonymised form and is used solely to improve the platform. We do not use third-party analytics providers that collect data across multiple websites.

4.4 Functional cookies. Functional cookies remember your in-platform preferences such as game display settings, table limits and notification preferences so that you do not need to reconfigure them on each visit.

4.5 No advertising or cross-site tracking cookies. 33bat does not deploy advertising cookies, retargeting pixels, social media share buttons or any other technology designed to track your activity across third-party websites. What you do on 33bat stays on 33bat.

4.6 Managing cookies. You may configure your browser to refuse or delete cookies at any time. Instructions for managing cookies in the most common browsers are available on each browser's support pages. Please be aware that disabling strictly necessary cookies will prevent you from logging into your 33bat account.

5.1 33bat retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following retention periods apply to the main categories of data we hold:

• Active account data (identity, contact, payment methods): retained for the full duration of the account plus five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records (deposit and withdrawal history, bet records): retained for seven years from the date of each transaction in line with standard financial record-keeping obligations.
• KYC identity documents: retained for five years from the date of account closure or from the date of the last transaction, whichever is later.
• Support communications: retained for three years from the date of the last message in the relevant conversation thread.
• Marketing consent records: retained for the duration of active consent plus two years following withdrawal of consent, to demonstrate compliance with applicable marketing regulations.
• Analytics data: retained in aggregated, anonymised form indefinitely. Individual-level session data is anonymised after 24 months.
• Security and access logs (IP addresses, login attempts): retained for 12 months from the date of recording, after which they are automatically purged.

5.2 When a retention period expires, data is permanently deleted from active systems and purged from backup storage within 90 days of the scheduled deletion date. Data that is the subject of an ongoing investigation, legal proceeding or regulatory inquiry is held until the matter is fully resolved, regardless of the standard retention period.

6.1 33bat maintains a comprehensive information security programme designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration and destruction. The programme encompasses the following technical and organisational measures:

• Transport security: All data transmitted between your browser or app and 33bat infrastructure is encrypted using TLS 1.2 or higher (256-bit SSL). Strict Transport Security (HSTS) headers prevent downgrade attacks.
• Data-at-rest encryption: Databases holding personal data, identity documents and financial records are encrypted at rest using AES-256. Encryption keys are managed separately from the data they protect.
• Access controls: Access to systems holding personal data is restricted on a need-to-know basis. All internal access is authenticated via multi-factor authentication and logged for audit review.
• Password security: Player passwords are stored as salted hashes using a modern one-way hashing algorithm. 33bat staff cannot retrieve or view your plain-text password.
• Two-step login: SMS-based two-step verification is available to all account holders and is strongly recommended. Accounts that exhibit unusual login patterns may have two-step verification enforced automatically.
• Penetration testing: 33bat engages independent security professionals to conduct regular penetration tests of the platform. Critical findings are remediated within 72 hours of discovery.
• Incident response: A documented data breach response procedure is in place. In the event of a breach affecting your personal data, you will be notified by email within 72 hours of 33bat becoming aware of the incident.

6.2 While 33bat takes every reasonable precaution to protect your data, no online service can guarantee absolute security. You are responsible for keeping your account credentials confidential and for ensuring that your own device is protected with up-to-date security software. If you suspect unauthorised access to your account, contact [email protected] immediately.

7.1 Right of access. You have the right to request a copy of all personal data that 33bat holds about you. We will provide this in a structured, machine-readable format within 30 days of receiving a verified request. To submit an access request, email [email protected] with the subject line "Data Access Request — [Your Username]".

7.2 Right to rectification. If any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. Most contact and preference data can be updated directly through your account settings dashboard.

7.3 Right to erasure. You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and there is no other lawful basis for continued processing; or (c) the data has been unlawfully processed. Please note that erasure requests may be refused where retention is required by law — for example, KYC and transaction records that must be held to satisfy anti-money laundering obligations.

7.4 Right to restrict processing. You may request that we restrict the processing of your data while the accuracy of the data is contested, while an objection to processing is pending, or where processing is unlawful but you prefer restriction to erasure.

7.5 Right to data portability. You may request that we provide your personal data in a portable format for transfer to another service provider. This right applies to data you provided to us directly and which we process on the basis of contract or consent.

7.6 Right to object. You have the right to object to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.7 Marketing opt-out. You may withdraw consent to marketing communications at any time. To opt out of all marketing emails and SMS from 33bat, follow the unsubscribe link in any marketing message or send an opt-out request to [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the 33bat platform.

7.8 Exercising your rights. All data rights requests should be submitted to [email protected]. We may ask you to verify your identity before processing a request to prevent unauthorised disclosure of your data. We will respond to all valid requests within 30 days. If we are unable to comply with a request, we will explain the reason in writing.

8.1 The 33bat platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect, store or process personal information belonging to anyone under the age of 21. Age verification is conducted as part of the registration process and again during KYC verification prior to the first withdrawal.

8.2 If 33bat discovers that personal data has been collected from a player who was under 21 at the time of registration, the account will be closed immediately, all balances will be handled in accordance with our Terms & Conditions, and all personal data associated with that account will be securely deleted from our systems without undue delay.

8.3 Parents or guardians who believe that a minor may have registered on the 33bat platform should contact [email protected] immediately. We will investigate the matter promptly and take appropriate action within 48 hours of receiving a verified report.

9.1 33bat reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary to reflect updates to our services, new legal or regulatory requirements, changes in data processing practices, or improvements to the clarity of our disclosures.

9.2 When we make a material change to this Privacy Policy — meaning a change that meaningfully affects how we collect, use or share your personal data — we will notify all registered account holders by email at least 14 days before the change takes effect. The notification email will summarise the key changes and link to the updated policy in full.

9.3 Non-material changes such as typographical corrections, formatting improvements or clarifications that do not alter the substance of our data practices will be made without advance notice. The effective date displayed at the top of this policy will be updated to reflect the date of the most recent revision.

9.4 Your continued use of the 33bat platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you should stop using the platform and submit an account closure request to [email protected] before the effective date of the change.

9.5 Previous versions of this Privacy Policy are available upon request. To obtain a copy of an earlier version, contact [email protected] with the specific effective date of the version you require.

10.1 33bat is the data controller responsible for the personal information collected through the 33bat platform at https://33bat.io. If you have any questions, concerns or requests relating to this Privacy Policy or to the way we handle your personal data, please contact our dedicated privacy team using the details below.

10.2 Email: For all privacy-related enquiries, data rights requests and data breach notifications, contact us at [email protected] with the subject line beginning with "Privacy —" to ensure your message is routed to the correct team.

10.3 Response time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 days. If your request is complex or involves a large volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

10.4 Identity verification: To protect your data, we will ask you to verify your identity before acting on any data rights request. Verification typically involves confirming your registered email address, username and one additional piece of account information.

10.5 All communications with our privacy team are treated as confidential. Emails are handled by authorised personnel only and are not shared with third parties except where required by law.