Privacy Policy for 33zz Casino

1. Introduction

This Privacy Policy ("Policy") is issued by 33zz Casino ("33zz", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "the Player") who access or use the 33zz Casino website located at https://33zz.io and any associated services, mobile interfaces, live chat systems, or communication channels operated by 33zz Casino in connection with the provision of online casino and sports betting services to players in Bangladesh.

33zz Casino takes the privacy of its players seriously. We are committed to handling your personal data with care, transparency, and respect. This Policy sets out the categories of personal data we collect, the purposes for which we process it, the parties with whom it may be shared, the security measures we apply, and the rights available to you as a data subject.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and 33zz Casino. Capitalised terms used but not defined in this Policy carry the same meaning as in the Terms & Conditions.

2. Data Controller

For the purposes of this Privacy Policy, 33zz Casino acts as the data controller in respect of the personal data of players located in Bangladesh. As data controller, 33zz Casino determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the 33zz Casino data protection contact point at any time using the details set out in Section 15 of this Policy.

3. Data We Collect

33zz Casino collects the following categories of personal data from players:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Gender (where voluntarily provided)
• National Identity Card (NID) number or passport number (for KYC verification)
• Copies of government-issued identity documents

3.2 Contact and Communication Data

• Email address
• Mobile phone number (including the mobile number associated with bKash, Nagad, or Rocket accounts)
• Residential address (city, district, and division within Bangladesh)
• Records of communications with the 33zz support team via live chat or email

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references
• Payment method identifiers (e.g., registered bKash or Nagad mobile number, masked Visa/Mastercard details)
• Account balance history
• Bonus and promotion redemption history

3.4 Gaming and Behavioural Data

• Game session records including games played, bet amounts, win/loss outcomes, and session duration
• Sports betting records including markets selected, wager amounts, and settlement outcomes
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

3.5 Technical and Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookie identifiers and session tokens (see Section 10)

4. How We Collect Data

33zz Casino collects personal data through the following means:

• Registration: Data you provide when creating your 33zz Casino account, including your name, email address, date of birth, and mobile number.
• KYC Verification: Identity and address documents you submit when completing account verification, or when requested prior to withdrawal processing.
• Deposits and Withdrawals: Transaction data generated when you use bKash, Nagad, Rocket, Upay, Visa, or Mastercard to fund or withdraw from your account.
• Platform Use: Gameplay and betting activity data generated automatically as you use the 33zz Casino platform.
• Support Interactions: Information you share with the 33zz support team through live chat, email, or any other communication channel.
• Cookies and Technical Tracking: Technical data collected automatically via cookies and server logs when you access the 33zz website (see Section 10).
• Third-Party Verification Services: Where required for identity verification, 33zz may receive data from third-party KYC or fraud-prevention service providers. Any such provider is contractually bound to handle data in accordance with this Policy.

5. How We Use Your Data

33zz Casino processes your personal data for the following purposes:

33zz Casino does not use your personal data for automated profiling that produces legal or similarly significant effects without human oversight. Responsible gaming monitoring tools that flag unusual activity patterns are subject to human review before any account action is taken.

6. Legal Basis for Processing

33zz Casino processes your personal data on the following legal bases:

• Contractual Necessity: The majority of processing activities described in this Policy are necessary to perform the contract between you and 33zz Casino — that is, to deliver the gaming and betting services you have subscribed to, and to manage your account and financial transactions.
• Legal Obligation: Certain processing activities — in particular identity verification (KYC), transaction record-keeping, and fraud and money-laundering prevention measures — are required to comply with applicable legal and regulatory obligations.
• Legitimate Interests: 33zz Casino processes technical and behavioural data on the basis of its legitimate interest in maintaining platform security, detecting and preventing abuse, and improving the quality of services offered to Bangladesh players. Such processing is proportionate and does not override your fundamental privacy rights.
• Consent: Where 33zz Casino wishes to send you promotional communications beyond transactional notifications, we will request your explicit consent. You may withdraw consent at any time by contacting our support team.

7. Sharing Your Data

33zz Casino does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary to deliver our services or comply with legal obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy and security framework.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying the identity and age of players. These providers are contractually bound to process data solely for the verification purpose and to maintain appropriate security standards.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session and wagering data necessary to deliver and audit their games. These providers do not receive your name, contact details, or payment information.
• Fraud Prevention and Security Services: Third-party fraud detection tools that help identify and prevent account takeover, bonus abuse, and financial crime. Access is limited to technical and transactional data.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful regulatory request, 33zz Casino may disclose personal data to competent authorities. We will notify you of any such disclosure where we are legally permitted to do so.

8. International Data Transfers

Some of the third-party service providers used by 33zz Casino — including game software providers and certain KYC or fraud-prevention tools — may process data on servers located outside Bangladesh. Where such transfers occur, 33zz Casino takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Such safeguards may include contractual data processing agreements that impose binding data protection obligations on the recipient, technical security measures including encryption in transit and at rest, and access controls that restrict data visibility to authorised personnel only.

If you would like further information about the safeguards applied to any specific international transfer of your data, please contact the 33zz support team using the details in Section 15.

9. Data Security

33zz Casino applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the 33zz Casino platform is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the platform.
• Access Controls: Personal data held by 33zz Casino is accessible only to staff members who require it to perform their specific operational role. Access is granted on a strict need-to-know basis and is subject to regular review.
• Secure Password Storage: Account passwords are stored using one-way cryptographic hashing. 33zz Casino staff cannot retrieve or view your plain-text password and will never ask you to provide it.
• Fraud Monitoring: Automated systems monitor account activity for signs of unauthorised access, unusual login patterns, and suspicious transaction behaviour. Flagged accounts are reviewed by the security team promptly.
• Incident Response: In the event of a data security incident that may affect your personal data, 33zz Casino will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

While 33zz Casino implements robust security measures, no platform can guarantee absolute security. You play an important role in protecting your account by keeping your 33zz login credentials confidential and logging out of shared devices after each session. If you believe your account has been compromised, contact our support team immediately via live chat.

10. Cookies & Tracking Technologies

33zz Casino uses cookies and similar tracking technologies on the 33zz website to maintain session state, improve platform functionality, and analyse aggregate usage patterns. The following categories of cookies are used:

33zz Casino does not use advertising cookies, cross-site tracking cookies, social media pixel tags, or any third-party retargeting technology. You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to log in and use the 33zz platform.

11. Data Retention

33zz Casino retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being active on the 33zz platform, plus a period of up to 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction Records: Financial transaction data is retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following account closure or the last transaction, whichever is later.
• Support Communication Records: Records of live chat and email interactions with the support team are retained for up to 2 years from the date of the interaction.
• Technical and Log Data: Server logs and session data are retained for up to 12 months from the date of generation.

When the applicable retention period expires, data is securely deleted from 33zz Casino systems or irreversibly anonymised so that it can no longer be linked to any individual player.

12. Your Rights

As a player whose personal data is processed by 33zz Casino, you hold the following rights in respect of your personal information:

• Right of Access: You may request a copy of all personal data that 33zz Casino holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request that 33zz Casino delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations (see Section 11).
• Right to Restriction: In certain circumstances, you may request that 33zz Casino restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a portable copy of the personal data you have provided to 33zz Casino in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on our legitimate interests. We will assess the objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact the 33zz Casino support team via live chat or at the email address set out in Section 15. We will respond to all data subject requests within a reasonable timeframe. We may need to verify your identity before processing certain requests to protect against unauthorised access to your data.

13. Children's Privacy

The 33zz Casino platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not register on, deposit funds into, or use the 33zz Casino platform in any capacity.

If 33zz Casino becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately closed, all associated data will be deleted, any deposited funds will be returned to the originating payment method, and all winnings generated by the underage account will be voided.

14. Policy Changes

33zz Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email to the address on file, or by displaying a prominent notice on the 33zz website, at least 14 days before the revised Policy takes effect.

The date of the most recent update to this Policy is displayed at the top of this page. Your continued use of the 33zz Casino platform after any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with a revised Policy, you must cease using the platform and may contact our support team to close your account and request deletion of your data.

We encourage all players to review this Privacy Policy periodically to stay informed about how 33zz Casino protects and uses their personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 33zz Casino, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the 33zz Casino website. Our support team typically responds within 2 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line of your email. We aim to respond to all privacy-related enquiries within 48 hours.

Our support team operates in English and is available year-round, including during Bangladeshi public holidays. When submitting a data subject request, please provide your registered email address and account username so we can locate your data and verify your identity efficiently.