Privacy Policy — bdg33 app

1 Information We Collect

bdg33 app collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and from third-party sources such as payment processors and identity verification providers. The categories of data we collect include the following.

Registration & Identity Data:

• Full legal name as it appears on your government-issued National ID Card or passport.
• Date of birth (used to verify that you are 18 years of age or older).
• Residential address in Bangladesh, including division, district, and upazila.
• Email address (used for account communications and password recovery).
• Mobile phone number linked to your bKash, Nagad, Rocket, or Upay account.
• Username and hashed password chosen at the time of registration.

Financial & Transaction Data:

• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Mobile banking account numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard — stored in tokenised form only, never as raw card numbers).
• Account balance history and bonus credit/debit records.

Technical & Usage Data:

• IP address, browser type and version, operating system, and device identifiers.
• Session timestamps, pages visited, game titles played, and bet histories.
• Cookies and similar tracking data (see the Cookies section below for full detail).

Communications Data:

• Records of live chat conversations with our support team, including timestamps and the content of your messages.
• Email correspondence and any attachments you send to [email protected].
• Feedback, complaint submissions, and dispute correspondence.

2 How We Use Your Data

The personal data bdg33 app collects is used for a defined set of purposes directly related to operating a safe, fair, and compliant online gaming platform for Bangladeshi players. We do not use your data for purposes that are incompatible with those listed below.

3 Legal Basis for Processing

bdg33 app processes personal data under one or more of the following recognised legal bases, depending on the nature of the processing activity:

• Contract: Processing is necessary to perform the contract between you and bdg33 app — specifically, to provide you with access to gaming and betting services, process your financial transactions, and maintain your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, age verification obligations, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for bdg33 app's legitimate business interests, provided those interests are not overridden by your fundamental rights. Examples include fraud prevention, network security, responsible gaming monitoring, and platform analytics.
• Consent: For certain processing activities — primarily marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting prior lawful processing.

Where we rely on legitimate interests as the legal basis, we carry out a balancing test to ensure that our interests do not unduly interfere with your privacy rights. If you would like more information about any specific balancing test, please contact our support team.

4 Data Sharing & Disclosure

bdg33 app does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

• Payment Service Providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process deposits and withdrawals on your behalf. These providers are bound by their own privacy and security obligations and are not permitted to use your data for any other purpose.
• Identity Verification Providers: To comply with KYC and age verification requirements, we may share your identity documents and personal details with third-party verification service providers. All such providers are contractually required to handle your data securely and confidentially.
• Fraud Prevention & AML Services: Transaction data and account information may be shared with fraud detection and anti-money laundering screening services to protect the integrity of the platform and comply with financial crime prevention obligations.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical and gameplay data (such as session tokens and bet records) in order to deliver their games. These providers do not receive your full personal profile.
• Legal and Regulatory Authorities: bdg33 app will disclose personal data to law enforcement agencies, regulators, or courts where we are compelled to do so by a valid legal order, court process, or regulatory requirement. We will notify affected players of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving bdg33 app, personal data held by the platform may be transferred to the acquiring entity. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

5 Cookies & Tracking Technologies

bdg33 app uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyse how the site is used. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot carry viruses.

The cookies used by bdg33 app fall into the following categories:

Strictly necessary cookies are placed automatically as they are essential for the platform to function. Functional, analytics, and performance cookies are placed only after you have had an opportunity to review and accept this Privacy Policy upon account creation.

bdg33 app does not use advertising cookies or retargeting pixels. We do not allow third-party advertising networks to place cookies on your device through the bdg33 app platform.

6 Data Retention

bdg33 app retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the entire duration of your account's active status, plus a minimum of 5 years following account closure to meet AML record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of 7 years from the date of the transaction to satisfy accounting and financial regulation obligations.
• Identity Verification Documents: KYC documents (such as copies of National ID Cards or passports) are retained for a minimum of 5 years following account closure or the date of verification, whichever is later.
• Support & Chat Records: Live chat transcripts and email correspondence are retained for up to 3 years from the date of the interaction, unless they relate to an ongoing dispute or legal matter.
• Marketing Consent Records: Records of your marketing opt-in or opt-out status are retained for the duration of your account plus 3 years, to demonstrate compliance with consent obligations.
• Technical & Log Data: Server logs, IP address records, and session data are retained for up to 12 months and then deleted or anonymised.

At the end of each retention period, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be linked back to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

7 Your Privacy Rights

As a bdg33 app player, you have a number of rights in relation to the personal data we hold about you. These rights may be subject to certain limitations and exemptions, particularly where retaining or processing the data is required by law or is necessary to establish, exercise, or defend legal claims.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared. Requests will be fulfilled within 30 days of receipt of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. This includes updating your address, email address, or mobile number.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests and a determination is pending.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You may also object to processing for direct marketing purposes at any time, and we will honour that objection immediately.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please contact our support team via live chat and provide your account username and a description of your request. We may need to verify your identity before processing the request. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

8 Data Security Measures

bdg33 app takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include the following:

• Transport Layer Security: All data transmitted between your browser or mobile device and bdg33 app servers is encrypted using TLS 1.2 or higher with 256-bit encryption. This protects your login credentials, payment data, and session information from interception.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm (bcrypt with an appropriate work factor), meaning that even in the event of a data breach, raw passwords cannot be recovered from stored hashes.
• Access Controls: Access to personal data held by bdg33 app is restricted to authorised personnel on a need-to-know basis. All internal access is logged, and access rights are reviewed regularly. Administrative accounts use multi-factor authentication.
• Tokenisation of Payment Data: Card details (Visa, Mastercard) are tokenised at the point of entry and are never stored in raw form on bdg33 app systems. Tokenisation is handled by PCI-DSS compliant payment processors.
• Regular Security Testing: bdg33 app conducts regular vulnerability assessments and penetration testing to identify and address potential weaknesses in platform infrastructure before they can be exploited.
• Incident Response: In the event of a data breach that is likely to pose a risk to your rights and freedoms, bdg33 app will notify affected players as soon as practicable and will take immediate steps to contain the breach, assess its impact, and prevent recurrence.

9 Third-Party Links & Services

The bdg33 app platform integrates game content provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While bdg33 app selects its technology partners carefully and requires them to maintain appropriate data security standards under contractual obligations, each provider operates under its own privacy practices for the specific data processed within its game infrastructure.

bdg33 app does not embed external third-party advertising links, social media widgets, or affiliate tracking pixels in its platform pages. Any links that appear on the platform will direct you to pages within the bdg33-app.club domain. We do not link to external websites and accept no responsibility for the privacy practices of any external site that you may access independently of the bdg33 app platform.

10 Updates to This Policy

bdg33 app reserves the right to update this Privacy Policy at any time. The most current version is always available at bdg33-app.club/privacy-policy. The "Last updated" date at the top of this page reflects when changes were most recently made.

Where we make material changes to this Privacy Policy — for example, changes that affect how we use your personal data or that introduce new categories of data collection — we will notify you by email to the address registered to your bdg33 app account, or by a prominent notice displayed when you next log in to the platform. We recommend that you review this page periodically to stay informed about how bdg33 app protects your information.

Your continued use of the bdg33 app platform after any changes to this Privacy Policy have been published constitutes your acknowledgement of the updated policy. If you do not agree with any changes, you should stop using the platform and may request account closure by contacting our support team via live chat. We will process your closure request in accordance with the Data Retention section of this policy.