bn33 Privacy Policy

1. Information We Collect

bn33 collects personal data in several ways: directly from you when you register an account or contact our support team, automatically through your use of the platform, and from third-party service providers who assist in delivering our services. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a bn33 account, we collect the following information:

• Identity data: Full legal name, date of birth, and gender (where provided).
• Contact data: Email address and mobile phone number registered in Bangladesh.
• Location data: City or division of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Account credentials: Username and hashed password (we do not store passwords in plain text).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies of government-issued identification documents, including National Identity Cards (NID), passports, or birth certificates issued by competent Bangladeshi authorities. We may also collect utility bills or bank statements as proof of address. These documents are processed for the sole purpose of verifying your identity and age, and are stored securely with restricted access.

1.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect transactional information including payment method details (such as bKash wallet numbers, Nagad account references, Rocket account identifiers, or Visa/Mastercard last four digits), transaction amounts in BDT, transaction timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs.

1.4 Usage and Technical Data

When you access the bn33 platform, our systems automatically record technical data including your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, games played, bets placed, and referring URL. This data is used to maintain platform security, improve user experience, and detect fraudulent activity.

1.5 Communication Data

If you contact bn33 via email at [email protected] or through the platform's live chat feature, we retain records of those communications, including the content of messages, timestamps, and any attachments you provide. These records are used to resolve disputes and improve support quality.

1.6 Voluntary Data

From time to time, you may voluntarily provide additional information, such as responses to surveys, entries to competitions, or feedback submitted through the platform. Such data is collected and used only for the specific purpose for which it was submitted.

2. How We Use Your Data

bn33 processes personal data only where there is a lawful basis for doing so. The primary purposes for which we use your data are set out in the table below:

Purpose	Data Used	Lawful Basis
Creating and managing your player account	Registration data, account credentials	Performance of contract
Processing deposits and withdrawals	Financial and transaction data	Performance of contract
Verifying your identity and age (KYC)	KYC documents, identity data	Legal obligation / platform security
Preventing fraud and detecting abuse	Usage data, technical data, transaction data	Legitimate interest
Providing customer support	Communication data, account data	Performance of contract
Sending account notifications and security alerts	Contact data	Performance of contract / legitimate interest
Sending promotional communications (opt-in only)	Contact data, usage data	Consent
Improving platform performance and UX	Usage data, technical data	Legitimate interest
Responsible gaming monitoring	Usage data, transaction data, account data	Legitimate interest / legal obligation

2.1 Marketing Communications

bn33 will only send you promotional emails, SMS messages, or platform notifications about bonuses, new games, or seasonal offers (such as Eid, Pohela Boishakh, or BPL promotions) if you have expressly opted in to receive such communications at the time of registration or via your account notification settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before your withdrawal.

2.2 Automated Decision-Making

bn33 may use automated systems to detect unusual account activity, flag potentially fraudulent transactions, or identify patterns consistent with bonus abuse. Where an automated process results in a material action on your account — such as a temporary suspension or transaction hold — you have the right to request human review of that decision by contacting [email protected].

3. Data Sharing & Disclosure

bn33 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data only in the limited circumstances described in this section.

3.1 Service Providers

We engage carefully selected third-party service providers who perform functions on our behalf, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner Bangladeshi banks), identity verification services, game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), customer support platform software, and cloud infrastructure providers. These providers are granted access only to the data necessary to perform their specific function and are contractually required to maintain the confidentiality and security of your information.

3.2 Legal and Regulatory Disclosure

bn33 may disclose your personal data where required to do so by law, court order, or lawful request from a competent authority. We may also disclose data where we believe, in good faith, that disclosure is necessary to protect the rights, property, or safety of bn33, our players, or the public — for example, in connection with investigations into suspected fraud, money laundering, or criminal activity.

3.3 Business Transfers

In the event that bn33 undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify affected players via the email address associated with their account prior to any such transfer and will ensure that the receiving party is bound by privacy obligations at least as protective as those set out in this Policy.

3.4 Aggregated and Anonymised Data

bn33 may share aggregated, anonymised, or pseudonymised data that cannot reasonably be used to identify you with analytics partners, research organisations, or game providers for the purpose of improving platform performance and understanding player behaviour at a population level. Such data does not constitute personal data and is not subject to the restrictions in this Policy.

4. Cookies & Tracking

bn33 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain session security, and understand how players interact with different parts of the website.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without rendering the platform non-functional.
• Functional cookies: Remember your preferences such as language settings, currency display, and game lobby layout. Disabling these cookies may reduce your experience but will not prevent you from logging in.
• Analytical cookies: Collect anonymised data about page visits, session lengths, and user journeys to help us identify and fix usability issues. We use this data internally and do not share it with external advertising networks.
• Security cookies: Used to detect suspicious login attempts, bot traffic, and account takeover attempts. These are part of our fraud prevention infrastructure.

4.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Safari, and others available on Android and iOS devices commonly used in Bangladesh) allow you to block or delete cookies via the privacy or security section of the browser settings menu. Please note that blocking strictly necessary cookies will prevent you from logging in to your bn33 account.

4.3 Third-Party Tracking

Game software embedded within the bn33 platform (provided by studios such as Pragmatic Play, Evolution Gaming, Spribe, and others) may set their own technical cookies required to operate the game client. bn33 does not control these cookies and is not responsible for the privacy practices of game studios. We encourage you to review the privacy documentation of individual game providers where available.

5. Data Retention

bn33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Dispute resolution, legal obligation
KYC identity documents	Duration of account + 5 years post-closure	Anti-fraud, legal obligation
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Customer support communications	3 years from last interaction	Dispute resolution, quality assurance
Usage and technical log data	13 months from collection	Security monitoring, platform improvement
Marketing consent records	Duration of consent + 3 years	Evidence of consent

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. If you close your account and wish to request early deletion of data not subject to a mandatory retention period, please contact [email protected].

6. Data Security

bn33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and bn33 servers.
• Encryption at rest for sensitive data categories including KYC documents, payment details, and authentication credentials.
• Password hashing using industry-standard algorithms; plain-text passwords are never stored.
• Role-based access controls ensuring that bn33 staff can only access player data to the extent required by their specific job function.
• Regular security audits and penetration testing of the platform infrastructure.
• Fraud detection systems monitoring transaction patterns and login behaviour in real time.
• Incident response procedures to detect, contain, and notify affected parties in the event of a confirmed data breach.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your own account credentials secure and for notifying us immediately if you suspect unauthorised access to your account.

6.1 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and interests, bn33 will notify affected players via the email address associated with their account without undue delay. The notification will describe the nature of the breach, the categories of data involved, the likely consequences, and the measures taken or proposed to be taken to address the breach and mitigate its effects.

7. Your Privacy Rights

As a player on the bn33 platform, you hold a number of rights in respect of your personal data. These rights are summarised below. To exercise any of them, please contact our Data Privacy team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to identify your account.

7.1 Right of Access

You have the right to request a copy of the personal data that bn33 holds about you. We will provide this information in a commonly used electronic format within 30 days of receiving your verified request.

7.2 Right to Rectification

If any personal data held about you is inaccurate or incomplete, you have the right to request that we correct it. We will process rectification requests within 14 business days. Note that certain fields (such as your registered name or date of birth) can only be corrected upon submission of supporting identity documentation.

7.3 Right to Erasure

You may request the deletion of personal data that we no longer have a lawful basis to retain. We will comply with erasure requests to the fullest extent possible, but please be aware that certain categories of data — particularly financial transaction records and KYC documents — must be retained for the periods specified in Section 5 above to comply with legal obligations. We will clearly communicate which data can be erased and which must be retained, along with the reason.

7.4 Right to Restrict Processing

In certain circumstances (such as where you contest the accuracy of data held about you, or where you have objected to processing based on legitimate interests), you may request that we restrict the processing of your personal data while the matter is resolved. During a restriction period, we will continue to store your data but will not actively process it beyond what is necessary to maintain the restriction.

7.5 Right to Data Portability

Where processing is based on your consent or performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another data controller.

7.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, where you believe that your fundamental rights and freedoms override those legitimate interests. We will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests.

7.7 Rights Related to Automated Decision-Making

As noted in Section 2.2, where an automated process produces a decision that materially affects your account, you have the right to request human review of that decision, to express your point of view, and to contest the decision. Please contact [email protected] to initiate a review.

8. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bn33 has handled your personal data, please contact our Data Privacy team using the details below.

8.1 Contact Details

All privacy-related enquiries should be directed to:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request — [Your Account Username]"
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

8.2 Response Timeframes

bn33 aims to acknowledge all privacy requests within 3 business days of receipt and to provide a substantive response within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

8.3 Policy Updates

bn33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players via the email address associated with their account and by posting a prominent notice on the bn33 platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the bn33 platform after a revised Privacy Policy has been posted constitutes your acceptance of the updated terms.