Your Privacy Matters at bdh33

1 Who We Are

bdh33 ("bdh33", "we", "us", "our") is the operator of the online gaming and sports betting platform accessible at https://bdh33.io and its associated mobile interfaces. This Privacy Policy governs the collection, use, storage, and disclosure of personal data by bdh33 in connection with the operation of its platform.

bdh33 is the data controller responsible for the personal data of registered players and visitors to the bdh33 website. Our platform is specifically designed to serve players located in Bangladesh, and this Privacy Policy is drafted with Bangladeshi players in mind, though the principles and obligations described herein apply to all users of the platform regardless of location.

If you have any questions about this Privacy Policy or about how bdh33 processes your personal data, you may contact our support team at support@bdh33.io. Our support team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

2 Data We Collect

bdh33 collects personal data only to the extent necessary to provide you with a secure, functional, and personalised gaming experience. The categories of personal data we may collect about you are as follows:

3 How We Collect Your Data

bdh33 collects your personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically when you visit or interact with the bdh33 platform, including IP address, browser fingerprint, session duration, pages visited, and device identifiers. This collection occurs via server logs, cookies, and similar tracking technologies described in Section 7.
• Third-party sources: Where identity or age verification requires additional confirmation, bdh33 may receive data from identity verification service providers. bdh33 may also receive fraud-related flags or AML indicators from payment processors such as bKash, Nagad, and Rocket in the course of processing financial transactions.
• Game providers: Licensed game studios integrated into the bdh33 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may transmit gaming session data to bdh33 for the purpose of account balance reconciliation, responsible gaming monitoring, and dispute resolution.

4 How We Use Your Data

bdh33 uses the personal data it collects for the following purposes:

• Account creation and management: To register your player account, verify your identity and age (confirming you are 21 years of age or older), and maintain your account in good standing.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to credit winnings to your account; to fulfil bonus and promotional entitlements; and to provide access to all games and betting markets on the bdh33 platform.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised access, suspicious betting patterns, collusion, money laundering, underage gambling, and other forms of fraudulent or prohibited activity.
• Legal and regulatory compliance: To fulfil any obligations arising under applicable anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, and any other legal obligations binding on bdh33.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and, where applicable, to enforce deposit limits, cooling-off periods, or self-exclusion requests submitted by the player.
• Customer support: To handle queries, complaints, and disputes submitted by registered players via email or live chat, and to maintain records of those interactions for quality assurance purposes.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the functionality, design, and content of the bdh33 platform.
• Marketing (with consent): To send you promotional offers, bonus alerts, and tournament notifications via your registered email address or mobile number, where you have opted in to receive such communications. You may withdraw consent at any time by contacting support@bdh33.io.

5 Legal Basis for Processing

bdh33 processes personal data only where a lawful basis exists for doing so. The principal legal bases under which bdh33 processes your data are:

• Contract performance: Processing that is necessary for bdh33 to fulfil its contractual obligations to you as a registered player — including account registration, payment processing, game access, and bonus fulfilment.
• Legal obligation: Processing that is required to comply with applicable legal requirements, including AML, KYC, and age-verification obligations.
• Legitimate interests: Processing that is necessary for the legitimate interests of bdh33, such as fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the platform — where such interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — principally in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

bdh33 does not sell your personal data to any third party. bdh33 may share your personal data with the following categories of recipient, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — solely for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age-verification service providers engaged by bdh33 to confirm player identity and age compliance as required by our responsible gaming and AML obligations.
• Game providers: Licensed game studios whose software is integrated into the bdh33 platform, who may receive limited session and account data necessary to render and settle games correctly.
• IT infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on behalf of bdh33 under strict data processing agreements that prohibit independent use of that data.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or regulatory bodies where bdh33 is legally required or compelled to disclose data, or where disclosure is necessary to protect the rights and safety of bdh33 or other users.

7 Cookies & Tracking Technologies

bdh33 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website server. Cookies allow bdh33 to recognise your browser across sessions, maintain your login state, and understand how you interact with the platform.

bdh33 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language, display settings, and last-used payment method — so that you do not need to reconfigure them on each visit.
• Analytics cookies: Used to collect anonymised data about how players navigate the bdh33 platform, which games are most popular, and where usability improvements can be made. Analytics data is processed in aggregate and is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the bdh33 platform. Disabling functional or analytics cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

8 Data Retention

bdh33 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of the player's active account relationship with bdh33, and for a minimum period of five (5) years following account closure to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Identity verification documents: Retained for the duration of the active account relationship plus five (5) years post-closure. Copies of documents are stored in encrypted form.
• Support communications: Retained for three (3) years from the date of the last communication, for quality assurance, dispute resolution, and legal defence purposes.
• Anonymised analytics data: May be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

Upon expiry of the applicable retention period, bdh33 will securely delete or anonymise your personal data such that it can no longer be linked to your identity.

9 Data Security

bdh33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and bdh33's servers.
• Encrypted storage of sensitive data fields, including identity document copies and financial account references, using AES-256 encryption at rest.
• Access controls that restrict internal access to personal data on a strict need-to-know basis. bdh33 staff members are not permitted to access player personal data beyond what their role requires.
• Two-factor authentication (2FA) available to all registered players to protect account access from their registered Bangladesh mobile number.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that are activated promptly in the event of a confirmed or suspected data security incident, including notification procedures where required.

10 Your Rights Over Your Data

As a registered bdh33 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact support@bdh33.io. bdh33 will respond to all valid requests within a reasonable timeframe and will not charge a fee for standard requests.

• Right of access: You may request a copy of the personal data bdh33 holds about you, together with information about how that data is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your bdh33 account. For basic account details such as email address and mobile number, you may update these directly via your account settings page.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent that was the sole basis for processing. This right is subject to bdh33's legal obligation to retain certain data for AML and KYC compliance — erasure requests will be fulfilled to the maximum extent permitted by law.
• Right to restriction: You may request that bdh33 restrict the processing of your data in certain circumstances — for example, while a complaint is being investigated.
• Right to data portability: Where processing is based on consent or contract performance, you may request that bdh33 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of bdh33's legitimate interests, including any direct marketing processing. bdh33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support@bdh33.io. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11 Children & Minors

The bdh33 platform is strictly intended for adults aged 21 years and over. bdh33 does not knowingly collect, process, or retain personal data from individuals below the age of 21. All registration applications are subject to age verification, and bdh33 reserves the right to request government-issued identity documentation at any stage to confirm that a player meets the minimum age requirement.

If bdh33 discovers or has reasonable grounds to suspect that an account has been registered by a person under the age of 21, that account will be immediately suspended, all associated balances will be withheld pending investigation, and any data collected from the underage individual will be deleted as soon as practicable following the conclusion of any necessary compliance review.

If you are a parent or guardian and you believe that your child has registered a bdh33 account, please contact us immediately at support@bdh33.io so that we can take prompt action.

12 International Data Transfers

bdh33's primary player base is located in Bangladesh, and the platform is operated with Bangladeshi players as the principal audience. Some of bdh33's technology partners — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as cloud infrastructure providers — may be located outside Bangladesh.

Where personal data is transferred to a third party located outside Bangladesh, bdh33 takes reasonable steps to ensure that such transfers are conducted securely and that the receiving party provides a level of data protection that is consistent with the standards set out in this Privacy Policy. These steps may include entering into data processing agreements with standard contractual clauses, or relying on the recipient's own certified security standards.

By registering a bdh33 account, you acknowledge that your data may be processed in countries other than Bangladesh in the circumstances described above, subject always to the security and purpose-limitation safeguards described in this Privacy Policy.

13 Changes to This Privacy Policy

bdh33 reserves the right to update, revise, or replace this Privacy Policy at any time. When material changes are made to this Policy, bdh33 will take reasonable steps to notify registered players — such as displaying a prominent notice on the platform or sending a notification to your registered email address — prior to the changes taking effect.

The most current version of this Privacy Policy is always accessible at https://bdh33.io/privacy-policy. The effective date shown at the top of this document reflects when the current version was last updated and came into force. Your continued use of the bdh33 platform after any revision takes effect constitutes your acceptance of the revised Policy.

If you disagree with any revision to this Privacy Policy, your sole remedy is to close your account and cease using the bdh33 platform. You may request account closure by contacting support@bdh33.io.

14 Contact & Data Requests

All privacy-related queries, data subject access requests, rectification requests, erasure requests, and complaints regarding bdh33's handling of your personal data should be directed to our support team using the contact details below. Our team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6) and is committed to responding to privacy requests within a reasonable timeframe.

• Email: support@bdh33.io (plain text — not a clickable link)
• Subject line recommended: "Privacy Request — [Your Registered Username]"
• Response time: Email within 24 hours; complex data subject requests within 30 days of receipt

When submitting a data subject request, please include your registered username and the email address associated with your bdh33 account so that we can locate your records efficiently. For security purposes, bdh33 may request additional verification before processing certain categories of request, particularly erasure requests and requests for copies of identity verification documents.