33mbw Privacy Policy & Data Rights

1. Introduction

This Privacy Policy (hereinafter "the Policy") applies to all personal data processed by 33mbw (hereinafter "we", "us", "the Platform", or "33mbw") in connection with the operation of the website at https://33mbw.io and all associated services, including sports betting, live casino, slot games, and player support. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, which together constitute the full agreement between you and 33mbw.

33mbw is committed to maintaining the privacy and security of personal information entrusted to us by our players. We recognise that players in Bangladesh place significant trust in online platforms when sharing financial and identity data, and we take that responsibility seriously. This Policy is written in plain, accessible English so that every player can understand how their data is handled.

The term "personal data" in this Policy refers to any information that can identify you directly or indirectly, including your name, date of birth, mobile number, email address, device identifiers, payment account details, and records of your activity on the 33mbw platform.

2. Data Controller

For the purposes of this Privacy Policy, 33mbw acts as the data controller — meaning it is the entity that determines the purposes and means of processing your personal data. All data-related enquiries, access requests, and complaints should be directed to the 33mbw support team at [email protected]. We aim to respond to all data-related requests within ten (10) business days of receipt.

3. Data We Collect

The categories of personal data that 33mbw may collect and process are set out in the table below:

Category	Examples	Purpose
Identity Data	Full name, date of birth, national ID number, photo ID scan	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number	Account communications, support, security alerts
Financial Data	bKash/Nagad/Rocket account number, bank account details, transaction history	Processing deposits and withdrawals, AML compliance
Technical Data	IP address, browser type, device model, operating system, session timestamps	Platform security, fraud detection, service optimisation
Usage Data	Games played, bets placed, pages visited, session duration	Responsible gaming monitoring, platform improvement
Communication Data	Support chat transcripts, email correspondence	Customer service, dispute resolution, quality assurance

33mbw does not collect sensitive data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by applicable law or directly relevant to a responsible gaming intervention.

4. How We Collect Your Data

4.1 Directly from You

The majority of personal data held by 33mbw is provided directly by you during the account registration process, during identity verification, when making a deposit or withdrawal request, and when contacting the support team. You are not obligated to provide any data, but failure to provide required information may prevent you from accessing certain features of the platform.

4.2 Automatically

When you visit https://33mbw.io or use the platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, browser and device information, and records of pages visited and features used. This data is collected to ensure platform security, prevent fraud, and improve the user experience.

4.3 From Third Parties

In some circumstances, 33mbw may receive data about you from third-party sources, including identity verification providers (used during KYC processes), payment processors (bKash, Nagad, Rocket, Upay, and partner banks), and fraud prevention services. Data received from these sources is used only in connection with the purposes for which it was shared and is subject to the same protections as data collected directly.

5. How We Use Your Data

33mbw processes your personal data for the following purposes:

• Account management: To create and maintain your player account, verify your identity, and manage your login credentials.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks accurately and securely.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, including record-keeping and suspicious activity reporting where required.
• Fraud prevention and security: To detect and investigate suspicious activity, protect players from unauthorised account access, and maintain the integrity of the platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance in English around the clock.
• Responsible gaming: To monitor usage patterns for signs of problem gambling behaviour and to apply account restrictions where requested or where our responsible gaming obligations require it.
• Platform improvement: To analyse aggregate, anonymised usage data and improve game selection, platform performance, and the overall player experience.
• Communications: To send you important account-related notifications, security alerts, and — where you have opted in — promotional communications about offers relevant to your interests on 33mbw.

6. Data Sharing & Disclosure

6.1 Service Partners

To deliver its services, 33mbw works with a small number of trusted third-party service providers. These include payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), identity verification providers, IT infrastructure and hosting providers, and customer support tooling providers. Each of these partners receives only the minimum data necessary to perform their specific function and is contractually bound to process that data only for authorised purposes.

6.2 Legal Disclosure

33mbw may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of 33mbw or its players, or where disclosure is required in connection with an AML investigation or court order.

6.3 No Sale of Data

33mbw does not sell, rent, lease, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Your data is an asset entrusted to us for the sole purpose of operating your account and delivering our services.

7. Cookies & Tracking Technologies

33mbw uses the following categories of cookies on its platform:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These remember choices you make — such as your preferred deposit method or game layout — to provide a more personalised experience.
• Analytics cookies: These collect aggregate, anonymised data about how players use the platform — such as which pages are most visited and how long sessions last. This data helps us improve the platform experience. No individual player is identified in this data.

33mbw does not use advertising cookies, cross-site tracking pixels, or any technology that shares your browsing behaviour with external advertising networks. You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account.

8. Data Retention

33mbw retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of the last transaction or account closure, in accordance with standard AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the last interaction, to support dispute resolution.
• Technical and usage logs: Retained for up to twelve (12) months, unless extended retention is required for a specific security investigation.

Once the applicable retention period has expired and there is no legal basis for continued processing, your data will be securely deleted or anonymised.

9. Security Measures

33mbw employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the 33mbw platform.
• One-way cryptographic hashing of account passwords — meaning passwords are never stored in a recoverable form.
• Access controls that limit which staff members can access personal data, governed by the principle of least privilege.
• Regular internal security reviews and vulnerability assessments of the platform.
• Automated monitoring for unusual login patterns, account takeover attempts, and other suspicious activities.

While 33mbw takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all threats. You are encouraged to use a strong, unique password for your 33mbw account and to contact support immediately if you suspect any unauthorised activity.

10. Your Rights as a Data Subject

As a registered player on 33mbw, you hold the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data that 33mbw holds about you at any time.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For basic profile details, you may also update these directly in your account dashboard.
• Right to erasure: You may request that your personal data be deleted, subject to any overriding legal retention obligations (for example, AML-mandated record-keeping periods).
• Right to restriction: In certain circumstances, you may request that processing of your data be restricted while a query or complaint is being resolved.
• Right to object: You may object to processing of your data for direct marketing purposes at any time, with immediate effect.
• Right to data portability: You may request that a copy of your personal data be provided in a structured, machine-readable format where technically feasible.

To exercise any of the above rights, please contact the 33mbw support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days, or inform you if additional time is required.

11. Minors & Age Verification

33mbw strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect or process personal data relating to minors. As part of our account registration and verification process, all players are required to confirm that they are at least 21 years of age and may be required to submit documentary proof of age.

If 33mbw becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through a misrepresentation during registration or any other means — the associated account will be immediately suspended, the data will be deleted in accordance with our retention policy, and any deposits or winnings associated with the account will be handled in accordance with our Terms & Conditions.

12. International Data Transfers

Some of 33mbw's service partners — including cloud hosting and infrastructure providers — may process data in locations outside Bangladesh. Where such transfers occur, 33mbw takes steps to ensure that appropriate protections are in place, including contractual safeguards that require recipients to protect the data to at least the same standard as described in this Policy. By using the 33mbw platform, you acknowledge that your data may be transferred internationally in this controlled and protected manner.

13. Changes to This Policy

33mbw reserves the right to update or revise this Privacy Policy at any time. Where changes are material, registered players will be notified by email or by a prominent notice on the platform at least seven (7) days before the updated Policy takes effect. The effective date shown at the top of this document will be updated accordingly. Your continued use of 33mbw following notification of changes constitutes your acceptance of the revised Policy.

We encourage players to review this Privacy Policy periodically to stay informed about how their data is being protected.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which 33mbw processes your personal data, please reach out to our dedicated support team. We are available 24 hours a day, 7 days a week, and respond in English.

Email: [email protected]

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. Players who registered before this date are subject to the current Policy from the effective date onward.