33kk Privacy Policy — How We Protect Your Personal Data

1. Who We Are

33kk ("we", "us", "our", "the Platform") operates the online betting and casino platform accessible at 33kk.io, including all associated subdomains and mobile web interfaces. 33kk acts as the data controller in respect of the personal data it collects from registered players and visitors to the platform.

This Privacy Policy applies to all personal data collected from individuals ("you", "the Player", "the User") who interact with 33kk in any capacity — including browsing the website without registering, creating an account, making a deposit, placing a bet, playing a casino game, contacting support, or participating in any promotion. This policy should be read alongside the 33kk Terms & Conditions, which form the overarching legal framework governing your relationship with the platform.

For all privacy-related matters, our designated point of contact is the 33kk Data & Compliance team, reachable at [email protected] with the subject line "Privacy Request".

2. Data We Collect

33kk collects personal data in the following categories, depending on how you interact with the platform:

2.1 Identity & Contact Data

This information is collected during account registration and is used to verify your identity, comply with Know Your Customer (KYC) requirements, and maintain accurate account records. Providing accurate identity data is a mandatory condition of using the platform.

2.2 Identity Verification Documents

To satisfy our KYC obligations, we may collect copies of government-issued identity documents including your National Identity Card (NID), passport, or birth certificate. Where proof of address is required, utility bills, bank statements, or other official documents dated within the last three months are accepted. These documents are retained securely and processed only for the purpose of verifying your eligibility to use the platform.

2.3 Financial & Transaction Data

33kk records the details of every financial transaction processed through your account for fraud prevention, regulatory compliance, and dispute resolution purposes. Full payment credentials (PINs, passwords, full card numbers) are never stored on 33kk's servers.

2.4 Platform Usage Data

This data is used to personalise your experience, detect unusual activity, and generate the account history reports available in your profile dashboard.

2.5 Technical & Device Data

Technical data is collected automatically when you access the platform and is used for security monitoring, fraud detection, and platform performance optimisation. Geographic location data is used to apply jurisdiction-level access controls and is not used for precision tracking of your physical movements.

2.6 Communications Data

If you contact 33kk via email, live chat, or WhatsApp, we retain records of those communications, including your contact details and the content of the exchange. This enables us to handle your enquiry accurately and maintain a complete service history for your account.

3. How We Collect Data

33kk collects your personal data through the following mechanisms:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Cookies, session tokens, web beacons, and server log files that record your activity on the platform automatically. See Section 8 for detailed cookie information.
• Third-party payment providers: Confirmation data provided by bKash, Nagad, Rocket, Upay, Visa, and Mastercard confirming that a payment instruction has been executed. 33kk does not receive your full financial credentials from these providers.
• Identity verification services: Where we engage third-party KYC verification tools to validate identity documents, those services may return verification results (confirmed / unconfirmed) and risk scores. The underlying document data is processed by the KYC provider under their own privacy terms.
• Game providers: Game session data (bets placed, outcomes, RTP achieved) transmitted from third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as part of the normal operation of their games on the 33kk platform.

4. How We Use Your Data

33kk uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your player account, processing deposits and withdrawals, and enforcing our one-account-per-player policy.
• Identity verification: Conducting KYC checks to confirm your age (minimum 21 years), identity, and eligibility to use the platform in accordance with our Terms & Conditions.
• Service delivery: Enabling you to place bets, play casino games, participate in promotions, and use all other features of the platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
• Legal and regulatory compliance: Maintaining transaction records, responding to lawful requests from competent authorities, and fulfilling any applicable anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations.
• Customer support: Handling your enquiries, complaints, and disputes accurately and efficiently.
• Platform improvement: Analysing aggregated, anonymised usage data to identify performance bottlenecks, improve game selection, and optimise the platform's user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.
• Marketing communications (opt-in only): Sending you information about promotions, bonuses, new games, and platform updates, but only if you have explicitly consented to receive such communications.
• Responsible gaming: Monitoring your playing patterns to identify indicators of problem gambling behaviour and, where appropriate, applying responsible gaming interventions in line with our Responsible Gaming policy.

5. Legal Basis for Processing

33kk processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create your account, verify your identity, process transactions, and deliver the services described in our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, record-keeping obligations, and lawful requests from regulatory or law-enforcement authorities.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing & Disclosure

33kk does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers to support platform operations, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC identity verification services, game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), cloud hosting providers, and customer support tools. These providers access only the data necessary to perform their specific service and are contractually bound to process it solely on 33kk's instructions.

6.2 Legal & Regulatory Authorities

33kk will disclose personal data to law-enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or lawful government request. Where legally permitted, we will notify you of such a request before complying.

6.3 Fraud Prevention & AML

In cases of suspected fraud, money laundering, or other serious criminal activity, 33kk may share relevant account and transaction data with other financial institutions or fraud-prevention organisations to prevent harm and protect the integrity of the platform.

6.4 Business Transfers

In the event that 33kk undergoes a merger, acquisition, or sale of substantially all assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

7. Payment Data & KYC

33kk treats financial data with the highest level of care. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is initiated and authenticated directly through the payment provider's own interface. 33kk receives only a transaction confirmation reference — not your wallet PIN, password, or full account credentials.

For withdrawal requests, we record the destination wallet number (e.g., your bKash mobile number) solely for the purpose of routing the payment. This information is stored in encrypted form and is accessible only to authorised personnel with a legitimate operational need.

KYC documents (NID scans, passport copies, proof of address) are stored in an encrypted document management system with access controls enforced by role-based permissions. Document data is retained for the period required by applicable law (see Section 9) and is not used for any purpose beyond identity verification and regulatory compliance.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by the 33kk platform when you visit. They allow the platform to recognise your device, maintain your session across pages, and store certain preferences to improve your experience.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymised data about how players use the platform — which pages are visited most, where errors occur, and how long sessions last. This data is used exclusively for internal platform improvement and is not linked to individual identities.
• Preference Cookies: Store your language, interface, and notification preferences so that the platform remembers your settings between sessions.
• Analytics Cookies: Help us understand broad usage patterns across the player base. Analytics data is aggregated and does not identify any individual player.

33kk does not use third-party advertising cookies or any tracking technologies that follow your activity on websites other than 33kk.io. You can disable non-essential cookies through your browser settings at any time; however, doing so may affect the functionality of certain platform features.

9. Data Retention

33kk retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the full duration of your account's active status.
• Closed account data: Following account closure, identity, transaction, and KYC records are retained for a minimum of five (5) years to fulfil anti-money laundering record-keeping obligations and to defend against any late-arising legal claims.
• Support communications: Retained for three (3) years from the date of the final communication in a given thread, unless the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your opt-in status plus three (3) years following any opt-out, as evidence that marketing was conducted with consent.
• Session and technical logs: Retained for up to twelve (12) months for security monitoring purposes, after which they are permanently deleted or fully anonymised.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

10. Data Security

33kk implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and the 33kk platform is encrypted using Transport Layer Security (TLS), preventing interception in transit.
• Encryption at Rest: Sensitive data stored on 33kk servers — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Employees and contractors who require access to player data do so under role-based permissions and are subject to confidentiality obligations.
• Intrusion Detection: Automated systems monitor platform traffic and database access patterns in real time, alerting the security team to any anomalous activity that may indicate an attempted breach.
• Regular Security Reviews: 33kk conducts periodic internal reviews of its data security practices and infrastructure to identify and address vulnerabilities proactively.

No security system is entirely infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 33kk will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

11. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data 33kk holds about you:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations (see Section 9).
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while we verify a rectification request or assess an objection.
• Right to Object: You may object to processing based on our legitimate interests, including the use of your data for internal analytics or platform improvement.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your account notification settings or contacting support.
• Right to Data Portability: Where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Privacy Request" and your registered account details. We will acknowledge all requests within 5 business days and provide a substantive response within 14 days. Where a request is particularly complex or voluminous, we may extend this period to 30 days with prior notice.

12. Children & Minors

33kk is strictly an adults-only platform. The minimum age to register and use the platform is 21 years. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that personal data has been collected from a minor, we will immediately suspend the associated account, void all related transactions and winnings, return any deposited funds to the originating payment method, and permanently delete the minor's personal data from our systems.

If you are a parent or guardian and believe a minor has created a 33kk account, please contact us immediately at [email protected] so that we can take prompt action.

13. Third-Party Links

The 33kk platform may contain references to game studios, payment providers, and sports organisations (such as BPL, IPL, T20 World Cup organisers) by name, but does not include clickable external links to third-party websites. To the extent that any third-party service is integrated into the platform (for example, a game iframe from Pragmatic Play or Evolution Gaming), that service operates under its own privacy policy. 33kk is not responsible for the data practices of any third-party service provider beyond the contractual obligations those providers owe to 33kk.

14. Policy Updates

33kk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players via email or an in-platform notice at least 7 days before the changes take effect. The "Last updated" date at the top of this document and in the table of contents will be revised accordingly.

Your continued use of the 33kk platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and contact support to close your account before the effective date.

We encourage you to review this page periodically. Archived versions of previous policies are available from the 33kk compliance team upon request.

15. Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or 33kk's data practices, please contact the Data & Compliance team through the following channels:

• Email: [email protected] — subject line: "Privacy Request" (response within 4 hours, Bangladesh Standard Time)
• Live Chat: Available 24/7 via the in-platform support widget
• WhatsApp: +880 1700 000000 (plain text — not a link)

All formal privacy complaints will be acknowledged within 24 hours and resolved within 14 business days wherever possible. If you are not satisfied with our response, you have the right to escalate your complaint to 33kk's senior compliance review panel by requesting escalation in writing.