33bed Privacy Policy — How We Protect Your Personal Data

1 Data We Collect

33bed collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with our website, and from third parties such as payment processors and identity verification providers. The specific categories of data we collect are described below.

Data you provide directly:

• Registration data: Full legal name, date of birth, Bangladeshi mobile number, email address, and a self-selected username and password.
• Identity verification (KYC) data: Scanned or photographed copy of your National Identity Card (NID) or passport, and where required, proof of address such as a utility bill or bank statement.
• Payment data: Your registered bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details for bank transfer requests; and partial card numbers where Visa or Mastercard is used. Full card numbers are never stored by 33bed — they are processed exclusively by our certified payment partners.
• Communication data: Messages sent to our support team via live chat or email, including timestamps and content, retained for quality assurance and dispute resolution purposes.
• Responsible gaming preferences: Deposit limits, session time limits, cooling-off periods, and self-exclusion records you set through your account dashboard.

Data collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each page, games played, bet history, click paths, and session duration. This data is used to improve the platform experience and detect unusual activity.
• Geolocation data: Approximate location derived from your IP address. 33bed does not use GPS-level precision tracking.
• Cookie and tracking data: As described in Section 4 of this policy.

2 How We Use Your Data

33bed processes your personal data only for specific, legitimate purposes. We do not use your data in ways that go beyond what is described below, and we do not make decisions about your account solely through automated processing without human review where those decisions have significant consequences.

• Account creation and management: To register your account, verify your identity, maintain your profile, process your login, and manage your account settings including responsible gaming preferences.
• Transaction processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and supported bank channels; to verify that payment accounts are registered in your own name; and to maintain an auditable transaction record.
• Identity verification and fraud prevention: To complete Know Your Customer (KYC) checks, verify your age (18+ requirement), detect and prevent fraudulent activity, and comply with anti-money laundering (AML) obligations.
• Platform operation and improvement: To deliver the games, betting markets, and features you access; to diagnose and resolve technical issues; and to analyse usage patterns that help us improve 33bed's services.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality and compliance purposes.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour and to enforce deposit limits, cooling-off periods, and self-exclusion measures you have activated.
• Legal compliance: To comply with applicable laws and respond to lawful requests from government authorities or regulatory bodies.
• Marketing communications: To send promotional offers, bonus notifications, and news about 33bed features — only where you have not opted out. See Section 6 for your right to withdraw consent.

3 Data Sharing & Third Parties

33bed does not sell your personal data. We share data with third parties only to the extent necessary to operate the platform, comply with legal requirements, or protect the safety of our users. All third-party partners who receive personal data are contractually bound to process it only for the specified purpose and to maintain appropriate security standards.

Categories of third parties who may receive your data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Visa/Mastercard network processors receive the minimum financial data necessary to complete your transaction. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Third-party KYC services that validate the authenticity of identity documents and screen against sanctions and politically exposed persons (PEP) lists. These providers receive only the data required to complete verification.
• Game content providers: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised or pseudonymised session tokens to deliver game content. They do not receive your full personal profile.
• Technical infrastructure providers: Cloud hosting, content delivery, and security service providers who process data on 33bed's behalf under strict data processing agreements.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to understand platform performance. No personally identifiable information is included in these reports.
• Law enforcement and regulators: We will disclose personal data to government authorities, law enforcement agencies, or courts when legally required to do so, or when disclosure is necessary to prevent fraud, money laundering, or harm to users or third parties.

4 Cookies & Tracking

33bed uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how users interact with the website. The following types of cookies are used:

Cookies are small text files stored on your device. They do not contain executable code and cannot access other files on your device. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in to your 33bed account.

33bed does not use third-party advertising cookies or cross-site tracking pixels that follow you across unrelated websites.

5 Data Retention

33bed retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to provide our services, and to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements and potential dispute resolution needs.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from account closure. Where a regulatory investigation is ongoing, retention may be extended until the matter is fully resolved.
• Support communications: Retained for three (3) years from the date of the last communication in a support thread, unless a related dispute or investigation requires longer retention.
• Marketing preferences and consent records: Retained for three (3) years from the date consent was given or last confirmed, or until you withdraw consent, whichever comes first.
• Technical logs (IP addresses, session data): Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which they are anonymised or deleted.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an identified individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

6 Your Privacy Rights

As a user of the 33bed platform, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of access: You may request a copy of all personal data 33bed holds about you, including the categories of data, the purposes for which it is processed, and any third parties to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date-of-birth corrections, re-submission of identity documents may be required.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations — for example, transaction records required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to restrict processing: You may request that 33bed limit the processing of your data while a complaint is under investigation, or while you contest the accuracy of data we hold.
• Right to data portability: You may request your account data in a structured, commonly used, machine-readable format (such as JSON or CSV) where processing is based on your consent or on a contract.
• Right to object to marketing: You may withdraw consent for marketing communications at any time without affecting the lawfulness of processing carried out prior to withdrawal. Use your account notification settings or email [email protected].
• Right to lodge a complaint: If you believe 33bed has not handled your personal data appropriately, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

7 Data Security Measures

33bed implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your browser or device and 33bed's servers is protected using TLS 1.2 or higher. The connection is indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive data fields — including identity document data, payment account references, and password hashes — are encrypted at rest in our databases using AES-256 encryption.
• Password security: Account passwords are stored as salted, cryptographically hashed values. 33bed staff cannot view your password in plain text. If you forget your password, it must be reset — it cannot be retrieved.
• Access controls: Internal access to player data is governed by role-based access control (RBAC). Staff are granted access only to the data categories required for their specific job function. All access events are logged and audited.
• Vulnerability management: 33bed conducts periodic security assessments of its platform infrastructure. Identified vulnerabilities are triaged and remediated according to severity within defined timelines.
• Incident response: In the event of a personal data breach that is likely to result in risk to players, 33bed will notify affected users and relevant authorities within the timeframes required by applicable law. Notifications will be sent to the mobile number or email address registered on your account.

8 Policy Updates & Contact

33bed reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will display a prominent notice on the 33bed website for a minimum of 30 days prior to the change taking effect. For significant changes that affect how we use your data in ways you would not reasonably expect, we will seek your explicit consent before applying the new practices to your existing data.

The most current version of this Privacy Policy is always available at https://33bed.vip/privacy-policy. The "Last updated" date at the top of this page reflects when the policy was most recently revised. We encourage you to review this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 33bed's handling of your personal data, please contact our privacy team using the details below. All contact information is provided as plain text — it is not clickable.

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response time: We aim to acknowledge all privacy enquiries within 5 business days and provide a full response within 30 calendar days.
• Language: Privacy enquiries may be submitted in English. Responses will be provided in English.