33bit Privacy Policy

This Privacy Policy ("Policy") is published by 33bit ("33bit", "we", "us", "our") and applies to all individuals who access, browse, register on, or otherwise use the 33bit platform at https://33bit.org and any associated sub-domains or mobile-optimised versions of the site (collectively, the "Platform"). This Policy is incorporated by reference into the 33bit Terms and Conditions and should be read alongside them.

33bit is committed to handling all personal data with integrity, transparency, and care. This Policy describes our practices regarding the collection, storage, use, and disclosure of personal data, as well as the rights available to you in connection with your data. By registering an account or using the Platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

This Policy is written in English. If any translation is made available for convenience, the English-language version shall prevail in the event of any inconsistency or dispute.

33bit collects personal data from you directly, automatically through your use of the Platform, and in limited circumstances from trusted third-party sources. The categories of data we collect are as follows:

33bit does not knowingly collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) unless you voluntarily provide such information in a support communication. If you inadvertently share special category data, we will handle it with the highest standard of care and will not process it for any purpose beyond resolving your support query.

33bit uses the personal data we collect for the following purposes. We process your data only where we have a valid legal basis for doing so, as described in Section 4 below.

• Account creation and management: To create, verify, and maintain your player account on the 33bit Platform, including processing your registration details and managing your account preferences.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to verify that the identity information you have provided is accurate and complete.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, and to maintain an accurate record of your transaction history in BDT.
• Platform operation and personalisation: To deliver the gaming and betting services you request, to remember your preferences, and to provide a personalised experience tailored to your usage patterns.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat or email, and to maintain a record of our communications for quality-assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the 33bit Terms and Conditions.
• Legal and regulatory compliance: To comply with applicable legal obligations, including anti-money-laundering (AML) requirements, and to respond to lawful requests from regulatory or law-enforcement authorities.
• Responsible gaming: To monitor your gaming patterns and, where our systems identify indicators of problem gambling behaviour, to apply responsible gaming measures proactively or to contact you with relevant guidance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email, where you have given your consent or where we have a legitimate interest in doing so and you have not opted out. You may opt out of marketing communications at any time by contacting [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the 33bit Platform.

33bit processes your personal data on the following legal bases:

1. Contractual necessity: Processing that is necessary to fulfil the contract between you and 33bit — i.e., to operate your player account, process transactions, and deliver the services you have signed up for.
2. Legal obligation: Processing that is required by applicable law, including identity verification, age verification, anti-money-laundering checks, and responses to lawful authority requests.
3. Legitimate interests: Processing that is necessary for 33bit's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided that such interests are not overridden by your rights and interests.
4. Consent: Processing for marketing communications and certain non-essential cookies, where we have obtained your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

33bit does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC service providers may receive your identity documents and verification data solely for the purpose of confirming your identity and age in compliance with our internal verification requirements.
• Game and platform providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised technical data (such as session tokens and bet records) as part of the game-delivery integration. These providers do not receive your full identity or contact data.
• Fraud and security services: Anti-fraud and risk-management service providers may receive technical and usage data to assist in detecting and preventing prohibited conduct on the Platform.
• Legal and regulatory authorities: We may disclose your personal data to law-enforcement agencies, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 33bit, our players, or the public.
• Business transfers: In the event of a merger, acquisition, asset sale, or other business reorganisation, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected players via email before any such transfer takes effect.

33bit retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The general retention periods applied by 33bit are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is not technically feasible, data is archived in a restricted environment accessible only to authorised personnel for legal-compliance purposes.

The 33bit Platform uses cookies and similar tracking technologies to operate the site correctly, remember your preferences, and analyse Platform performance. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other data stored on your device.

33bit uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, such as language settings, preferred payment method, and responsible gaming limits you have set. Disabling these cookies may reduce your personalised experience.
• Analytics cookies: Collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the Platform and is not linked to your individual identity.
• Security cookies: Assist in identifying and preventing fraudulent activity, detecting unusual login patterns, and maintaining Platform integrity.

33bit does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your account or using core Platform features.

33bit implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our current security infrastructure includes:

• SSL/TLS encryption: All data transmitted between your browser and the 33bit Platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser address bar confirms an active encrypted connection.
• Data encryption at rest: Sensitive personal and financial data stored in our databases is encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA): OTP-based 2FA is available to all registered players and is strongly recommended. 33bit staff accounts with access to player data are required to use 2FA.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All data-access events are logged and subject to regular internal audit.
• Vulnerability management: The Platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights or interests, 33bit will notify affected players without undue delay and will take immediate steps to contain the breach and prevent recurrence.

As a registered player on the 33bit Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within a reasonable timeframe and at no charge for standard requests.

1. Right of access: You may request a copy of the personal data that 33bit holds about you, along with information about how it is being processed.
2. Right to rectification: You may request that we correct any inaccurate or incomplete personal data held about you. You may also update certain information directly from within your account settings.
3. Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data as described in Section 6.
4. Right to restriction of processing: You may request that we temporarily suspend the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
5. Right to data portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider.
6. Right to object: You may object to processing based on our legitimate interests, including direct marketing. Where you object to marketing, we will cease sending marketing communications immediately upon receipt of your request.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

Please note that some rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain, or data that is necessary to resolve an ongoing dispute. Where we are unable to fulfil a request in full, we will explain the reasons in our response.

The 33bit Platform does not contain outbound links to external third-party websites. However, game content delivered via integrated third-party software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) is served within iframes or embedded environments on the Platform. While 33bit takes care to work only with reputable, security-certified providers, we have no control over the internal data practices of these providers within their own game environments.

If you have questions about how a specific game provider handles data within their game environment, we recommend consulting the privacy documentation published by the relevant provider directly. 33bit is not responsible for the privacy practices of any third-party game provider operating within an embedded environment on the Platform.

The 33bit Platform is strictly intended for adults aged 21 years and above. 33bit does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete all related personal data, and, where applicable, return any deposited funds at our discretion after investigation.

If you are a parent or guardian and you believe that your child has registered on the 33bit Platform or provided their personal data to us, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary remedial action.

33bit reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made to this Policy, we will notify registered players by email to the address on file and/or by a prominent notice on the Platform for a minimum of seven (7) days before the changes take effect.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. Your continued use of the 33bit Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how 33bit is protecting your personal data and what your rights are as a player.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 33bit handles your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

For requests to exercise your data rights (access, rectification, erasure, portability, or objection), please send a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge receipt of your request within 24 hours and provide a full response within 30 days. In complex cases where additional time is required, we will inform you of the expected resolution timeline.