Your Privacy Matters at 33bed

33bed ("the Platform", "we", "us", "our") operates the online betting and casino platform accessible at https://33bed.io. In providing our services to players across Bangladesh, we necessarily collect and process certain personal data about you. We recognise that your personal information is valuable and that you have every right to know how it is used.

This Privacy Policy sets out in plain, transparent language: what categories of personal data we collect; the purposes for which we use that data; the legal basis for each processing activity; how long we retain your data; with whom we may share it; and what rights you hold in respect of your personal information.

33bed is the data controller in respect of all personal data collected through the platform. We process personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We do not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes.

The personal data that 33bed collects about you falls into the following categories, depending on how you interact with the platform:

We do not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) and we ask that you do not provide such information when using our platform. If you do provide such data incidentally (for example, in a support communication), we will treat it with the highest level of confidentiality.

33bed collects personal data through the following channels:

• Direct interactions: When you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal request, contact our support team, or participate in a promotion, you provide data directly to us.
• Automated technologies: When you visit the 33bed website, our servers automatically log technical and usage data, including your IP address, device identifiers, and browsing behaviour, through cookies, web beacons, and similar tracking technologies.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners share transaction reference data with us to reconcile your account balance.
• Identity verification partners: When you submit KYC documents, we may use a third-party identity verification service to confirm the authenticity of the documents and the accuracy of the information you have provided.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level data (e.g., round IDs, bet amounts, game results) with us for reconciliation and responsible gaming monitoring purposes.
• Analytics providers: We use analytics tools to understand aggregate platform usage patterns. This data is pseudonymised and used only to improve platform performance and user experience.

We process your personal data only where we have a lawful basis for doing so. The table below sets out the primary purposes for which we use your data and the corresponding legal basis for each processing activity.

33bed does not sell, rent, or share your personal data with unaffiliated third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients where it is necessary to do so:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other financial institutions involved in processing your deposits and withdrawals. These providers receive only the minimum data necessary to complete your transaction.
• Identity verification services: Third-party KYC providers who assist us in verifying the authenticity of identity documents submitted by players. These providers act as data processors under contractual obligations to maintain confidentiality.
• Game content providers: Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive pseudonymised session data necessary to deliver and settle games. These providers do not receive your full identity information.
• Analytics and technology partners: Providers of website analytics, platform infrastructure, and cybersecurity services who process data on our behalf under strict data processing agreements. All such providers are bound by confidentiality obligations.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, or courts where disclosure is required by applicable law, legal process, or a valid regulatory request. 33bed will, where legally permitted, notify you before disclosing your data to such authorities.
• Professional advisors: Lawyers, auditors, and accountants who provide professional services to 33bed and who are subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 33bed's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

The 33bed website uses cookies and similar tracking technologies to operate correctly, to remember your preferences, to analyse usage patterns, and to deliver a personalised experience. The following types of cookies are used on the platform:

• Strictly necessary cookies: These cookies are essential to the operation of the platform. They enable core functions such as user authentication, session management, load balancing, and security features. The platform cannot function correctly without these cookies and they cannot be disabled.
• Performance and analytics cookies: These cookies collect information about how visitors use the 33bed platform — for example, which pages are visited most frequently, how long users spend on each section, and where errors occur. All data collected is aggregated and anonymised. We use this information to improve the platform for all users.
• Functional cookies: These cookies allow the platform to remember your preferences, such as your preferred language, your most recently played games, and your responsible gaming settings. Disabling these cookies may affect the quality of your experience.
• Marketing and targeting cookies: With your consent, we may use cookies to track your interactions with 33bed promotions and to measure the effectiveness of our marketing campaigns. You can withdraw consent for marketing cookies at any time through your browser settings or by contacting our support team.

You can control or delete cookies through your browser settings. Please be aware that disabling certain cookies may impair the functionality of the 33bed platform. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

33bed retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of 7 years following each transaction to satisfy financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Gaming activity and bet records: Retained for a minimum of 5 years following the relevant gaming session, for dispute resolution and responsible gaming monitoring purposes.
• Support and communications records: Retained for 3 years following the closure of the relevant support interaction or complaint, for dispute resolution purposes.
• Marketing consent records: Retained for the duration of your marketing consent and for 3 years following withdrawal of consent, as evidence of your preference history.
• Technical and usage logs: Retained for up to 12 months on a rolling basis, for cybersecurity and platform performance monitoring purposes.

When your personal data is no longer required for the relevant purpose, it will be securely deleted, anonymised, or archived in a manner that prevents further use, in accordance with 33bed's internal data retention and destruction policy.

33bed takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• SSL/TLS encryption: All data transmitted between your device and the 33bed platform servers is encrypted using 256-bit SSL/TLS protocols. This applies to account login, payment processing, and any form submission on the platform.
• Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. 33bed staff cannot view your password in plain text under any circumstances.
• Access controls: Access to personal data held by 33bed is strictly limited to authorised personnel on a need-to-know basis. All staff who handle personal data are subject to confidentiality obligations and receive regular training on data protection practices.
• Network security: The 33bed platform infrastructure is protected by firewalls, intrusion detection systems, and regular independent security audits to identify and address vulnerabilities.
• Payment security: Payment instrument details (such as bKash or Nagad account numbers) are tokenised and never stored in plaintext on 33bed servers. All financial transactions are processed through secure, PCI-DSS compliant payment gateways.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 33bed will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

As a user of the 33bed platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to respond in full within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data that 33bed holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update many of your account details directly through your profile settings page.
• Right to erasure: In certain circumstances, you have the right to request that 33bed delete your personal data. Please note that this right is subject to limitations where we are required to retain data for legal, regulatory, or contractual reasons (for example, AML record-keeping obligations).
• Right to restrict processing: You may request that 33bed restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you object to our use of it.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a structured, machine-readable copy of the personal data you have provided to us.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for marketing purposes. You may opt out of direct marketing communications at any time through your account settings.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The 33bed platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes an age declaration requirement and we conduct identity and age verification for all accounts prior to processing any withdrawal.

If we discover or are notified that a person under the age of 21 has registered an account on the 33bed platform, we will immediately suspend that account, delete any personal data associated with it to the extent permitted by applicable legal obligations, and forfeit any balance held in the account. Any winnings generated by an underage user are not payable under any circumstances.

The 33bed platform integrates with a number of third-party services to deliver its full range of features. These include game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), payment processors (including bKash, Nagad, Rocket, and Upay), and technology infrastructure providers. Each of these third parties operates under its own privacy policy and data protection terms.

33bed enters into data processing agreements with all third-party service providers who handle personal data on our behalf, requiring them to implement appropriate security measures and to use your data only for the specific purposes for which it has been shared. We conduct due diligence on all third-party data processors to confirm that they maintain adequate data protection standards.

Please note that the 33bed website may contain links to the websites of our game providers or payment partners. Once you navigate away from the 33bed platform, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party websites you visit via links on our platform.

Some of the third-party service providers engaged by 33bed — including game content studios and platform infrastructure providers — are based outside Bangladesh and may process your personal data in other jurisdictions. In such cases, 33bed takes steps to ensure that your data receives an equivalent level of protection to that afforded within Bangladesh, including through contractual safeguards in the form of data processing agreements that impose strict confidentiality and security obligations on the receiving party.

Your financial transaction data processed via local payment providers (bKash, Nagad, Rocket, Upay, and Bangladeshi banks) is processed and stored within Bangladesh-based infrastructure to the extent that those providers operate locally. Where any cross-border transfer of financial data is necessary, it is carried out under strict contractual protections and only to the extent required to complete your transaction.

33bed reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features available on the platform. When a material change is made to this policy, we will provide reasonable notice to registered users via the email address associated with their account or via a prominent notice on the 33bed website.

Your continued use of the 33bed platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material update to this policy, you may request voluntary account closure by contacting our support team before the revised policy takes effect.

The most current version of this Privacy Policy is always available at https://33bed.io/privacy-policy. We recommend reviewing this page periodically to stay informed about how 33bed protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, please contact the 33bed data protection team using the details below. All privacy-related enquiries must be submitted in English.

• Email: [email protected] — please use the subject line "Privacy / Data Rights Request" for all data-related enquiries.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 33bed platform. For formal data rights requests, email is the preferred channel as it creates a written record.
• Response time: 33bed aims to acknowledge all privacy-related requests within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.
• Identity verification: To protect your personal data, 33bed may require you to verify your identity before processing any data access, rectification, or erasure request. This typically involves confirming details associated with your registered account.

33bed is committed to handling all privacy enquiries and data rights requests with care, transparency, and respect. We view every interaction with our data protection team as an opportunity to demonstrate our genuine commitment to protecting the privacy of every player across Bangladesh.