Privacy Policy — How 33det Handles Your Data

33det collects personal data through several distinct channels in the normal course of operating the platform. Understanding which data we collect, and through which channel, is the foundation of this Privacy Policy. We collect only the data that is genuinely necessary for the purposes described in Section 2 of this policy.

Data you provide directly: When you register a 33det account, you provide your full name, date of birth, email address, mobile phone number, and a chosen username and password. If you proceed to KYC verification — which is required before withdrawals are processed — you will also provide a copy of a government-issued photo identification document such as a national identity card or passport. During the course of using the platform, you may provide additional information through support contacts, feedback forms, or promotional opt-ins.

Data collected automatically: When you access the 33det platform through a web browser or mobile browser, our servers automatically record certain technical information, including your IP address, the type and version of the browser you are using, your device operating system, the pages you visit within the platform, the time and duration of your session, and referring URLs. This data is collected using standard server logging and cookie technologies described in Section 4.

Data from payment providers: When you initiate a deposit or withdrawal through a supported payment method such as bKash, Nagad, Rocket, or Upay, the relevant payment provider shares a transaction reference and confirmation status with 33det. We do not receive or store full mobile banking PINs or bank account passwords. The data shared by payment providers is limited to what is necessary to confirm that a transaction has been completed and to reconcile your 33det wallet balance accurately.

Data from third-party game providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and others may share aggregated session and outcome data with 33det for the purpose of settling game results and resolving disputes. This data is technical in nature and does not include independently collected personal identifiers beyond those already held by 33det.

33det processes personal data only where there is a clear and legitimate purpose for doing so. The following describes the primary purposes for which your data is used and the legal basis underpinning each use:

• Account creation and management: Your identity and contact data are used to create and maintain your 33det account, authenticate your logins, and communicate essential account notifications such as security alerts, password resets, and verification requests. Legal basis: performance of contract.
• Processing deposits and withdrawals: Financial and identity data are used to initiate, process, and reconcile payment transactions through supported Bangladeshi payment channels. Legal basis: performance of contract.
• Identity and age verification (KYC): Identity documents are reviewed to confirm that you meet the minimum age requirement of 18 years and to satisfy the platform's internal anti-fraud and anti-money-laundering obligations. Legal basis: legal obligation and legitimate interest.
• Fraud prevention and security monitoring: Technical and behavioural data — including IP addresses, device fingerprints, and betting patterns — are analysed to detect and prevent fraudulent activity, multi-accounting, and unauthorised access. Legal basis: legitimate interest.
• Customer support: Communications data is used to respond to your support queries, investigate complaints, and maintain a record of resolutions. Legal basis: performance of contract and legitimate interest.
• Platform improvement and analytics: Aggregated usage and technical data are analysed to understand how users interact with the 33det platform, identify performance issues, and prioritise product improvements. This analysis uses anonymised or pseudonymised data wherever possible. Legal basis: legitimate interest.
• Responsible gaming monitoring: Betting behaviour and session data are monitored to identify patterns that may indicate problem gambling. Where such patterns are detected, 33det may reach out proactively or apply responsible gaming controls. Legal basis: legitimate interest and user welfare.
• Marketing communications: Where you have explicitly opted in to receive promotional communications, your contact data may be used to send you information about bonuses, promotions, new game releases, and seasonal offers relevant to the Bangladesh market. You may opt out at any time. Legal basis: consent.

33det does not use your personal data for automated decision-making that produces significant legal effects without human review. Decisions regarding account closures, withdrawal restrictions, or responsible gaming interventions involve human oversight by the 33det support and compliance team.

33det does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data is shared with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: Transaction data is shared with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank to facilitate deposits and withdrawals. Each payment provider operates under its own privacy practices and terms of service.
• Game technology providers: Session outcome data is exchanged with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to settle game results, resolve technical disputes, and confirm RNG integrity. These providers are contractually bound to handle data in a manner consistent with industry data protection standards.
• Identity verification services: Where third-party KYC or document verification technology is used to assist with identity checks, relevant document images and identity fields may be processed by the verification partner on 33det's behalf. The partner acts as a data processor under 33det's instruction.
• Fraud detection and security partners: Technical data including IP addresses and device identifiers may be processed by fraud detection service providers to assess risk scores and flag anomalous activity. These partners do not use this data for any purpose beyond the fraud-prevention service they provide to 33det.
• Legal and regulatory authorities: Where required by law, court order, or a request from a competent authority, 33det may disclose personal data without prior notice to the user. This includes disclosures made in connection with anti-money-laundering investigations or fraud prosecutions.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the 33det business, personal data held by the platform may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

33det uses cookies and similar tracking technologies to operate the platform, maintain your session state, and gather analytics data about how the platform is used. A cookie is a small text file stored on your device by your browser at the instruction of a website. Cookies do not contain executable code and cannot access other files on your device.

The platform uses three categories of cookies:

Essential cookies cannot be disabled without disrupting core platform functionality such as authentication and payment processing. Analytics and functional cookies can be declined through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or settings menu. Note that disabling functional cookies may degrade certain personalisation features on the 33det platform.

33det does not use third-party advertising cookies or any tracking technology designed to follow your activity across websites outside of the 33det platform.

33det implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online system can guarantee absolute security, the following controls are in place across the 33det platform:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and the 33det platform is encrypted using industry-standard TLS encryption. The padlock icon in your browser's address bar confirms that an encrypted connection is active.
• Password hashing: User passwords are never stored in plain text. They are processed through a strong one-way hashing algorithm with salting, meaning that even in the unlikely event of a data breach, raw passwords cannot be recovered from stored values.
• Access controls: Access to personal data within 33det's internal systems is restricted on a strict need-to-know basis. Staff members access only the data necessary to perform their specific role, and all access is logged for audit purposes.
• Infrastructure security: Platform infrastructure is hosted on servers with physical and network security controls, regular vulnerability scanning, and intrusion detection monitoring.
• Fraud and anomaly monitoring: Automated systems continuously monitor login activity, transaction patterns, and device fingerprints for anomalies that may indicate unauthorised access or account compromise.
• Incident response: In the event of a security incident that affects your personal data, 33det will investigate promptly and notify affected users via their registered email address where required by applicable data protection standards.

33det retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention principles apply:

• Active account data: Personal data associated with a live, active 33det account is retained for the duration of the account's existence and for a period thereafter as described below.
• Post-closure retention: Following the closure of a 33det account — whether initiated by the user or by 33det — certain personal data including identity records, transaction history, and KYC documentation is retained for a minimum of five years. This retention period reflects the platform's obligations under generally accepted anti-money-laundering and fraud-prevention standards applicable to offshore gaming operators.
• Support correspondence: Records of support interactions, complaints, and resolutions are retained for a period of three years following the date of the last interaction, to support the handling of any retrospective dispute or escalation.
• Marketing data: If you have opted into marketing communications, your contact preferences are retained until you withdraw your consent. Upon opt-out, marketing communications cease promptly and contact data is removed from active marketing lists within 30 days.
• Technical and analytics data: Server logs, session data, and anonymised analytics data are retained for up to 24 months, after which they are deleted or fully anonymised in a manner that makes re-identification impossible.

When personal data is no longer required under any of the above retention criteria, it is securely deleted or anonymised. 33det does not archive personal data beyond the periods described above for historical or research purposes without obtaining separate informed consent.

33det respects your rights over your personal data. As a registered user of the platform, you are entitled to exercise the following rights by submitting a written request to [email protected]:

33det reviews this Privacy Policy periodically to ensure it remains accurate and reflects any changes to platform operations, applicable laws, or industry standards. When material changes are made, the updated policy will be published on this page with a revised effective date displayed at the top of the document. For significant changes that affect how your data is processed in a material way, we will also notify registered users via the email address on file.

We encourage you to review this page from time to time to stay informed about how 33det protects your information. Continued use of the platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 33det handles your personal data, please contact us through the following channel:

• Support email: [email protected] (plain text — not a clickable link)
• Support hours: 10 AM – 11 PM Bangladesh Standard Time (BST, UTC+6), seven days a week
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a full response within 30 days

33det is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with the response you receive, you may escalate your concern in writing and the matter will be reviewed by a senior member of the 33det compliance team.