How bdc33 Collects, Uses, and Protects Your Personal Data

bdc33 is an internationally licensed offshore online gaming and sports betting platform that provides cricket sportsbook, live casino, slots, crash games, and related betting products to eligible players. The platform is accessible at https://bdc33.io and through any associated mobile interfaces or applications.

For the purposes of this Privacy Policy, bdc33 acts as the data controller in respect of personal data collected from players, prospective players, and visitors to the platform. As data controller, bdc33 determines the purposes and means by which personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our support team at [email protected]. Please note that this address is for written correspondence only and is presented as plain text — it is not a clickable link.

bdc33 collects the following categories of personal data, depending on how you interact with the platform:

bdc33 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you visit or use the platform, via cookies, web beacons, server logs, and similar tracking technologies (see Section 7 — Cookies and Tracking).
• Payment providers: Transaction confirmation data and wallet reference numbers received from mobile financial service providers including bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal.
• Identity verification services: Where bdc33 engages a third-party KYC verification partner, that partner may provide the results of document authenticity checks and identity matching to bdc33 as part of the account verification process.
• Fraud prevention and AML partners: Risk-scoring data and alerts from third-party fraud detection or AML screening services used to comply with our obligations to prevent financial crime on the platform.

bdc33 processes your personal data only where a valid legal basis exists for doing so. The principal legal bases on which bdc33 relies are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and bdc33 — that is, to provide you with access to the platform, process your bets, credit your winnings, and enable deposits and withdrawals.
• Legal obligation: Processing is necessary for bdc33 to comply with applicable legal requirements, including anti-money-laundering (AML) regulations, know-your-customer (KYC) obligations, and fraud prevention duties.
• Legitimate interests: Processing is necessary for bdc33's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and improving the platform's features and performance — provided those interests are not overridden by your rights and freedoms.
• Consent: Where bdc33 relies on your consent to process data (for example, for direct marketing communications), you may withdraw that consent at any time by contacting our support team or adjusting your account communication preferences.

bdc33 uses the personal data it collects for the following specific purposes, each of which is supported by a corresponding legal basis as described in Section 4:

• Account creation and management: To register your account, maintain your player profile, verify your identity, and manage your account settings and preferences.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to process withdrawal requests to your registered payment account.
• Platform provision: To enable you to place bets, play casino games, access promotions, and use all features and functions of the bdc33 platform.
• Identity and age verification: To verify that you are at least 21 years of age and that the identity information you have provided is genuine, in compliance with our responsible gaming and AML obligations.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, to apply deposit and loss limits you have set, to enforce self-exclusion requests, and to comply with our responsible gaming policy.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, match-fixing, and other prohibited conduct on the platform.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of those interactions for quality assurance purposes.
• Legal compliance: To comply with applicable laws, regulations, court orders, and instructions from competent regulatory or law enforcement authorities.
• Platform improvement: To analyse usage patterns, identify technical issues, conduct A/B testing, and improve the features, performance, and user experience of the bdc33 platform.
• Promotional communications: Where you have consented, to send you information about bdc33 promotions, bonuses, and platform updates via email or in-platform notifications.

bdc33 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment service providers: Mobile financial services including bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. These providers act as independent data controllers for payment processing and are bound by their own privacy policies and applicable financial regulation.
• Identity verification partners: Third-party KYC and AML service providers engaged by bdc33 to perform identity document verification, age verification, and sanctions screening. These providers act as data processors and are contractually bound to process data only on bdc33's instructions.
• Fraud prevention and security services: Third-party risk management and fraud detection platforms that assist bdc33 in identifying and preventing fraudulent, multi-account, and prohibited activity. Data shared is limited to technical identifiers and risk-scoring inputs.
• Game content providers: Licensed game studios and platform providers — including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming — may receive session tokens or anonymised player identifiers necessary to deliver their games. These providers do not receive your full personal profile.
• Legal and regulatory authorities: Where required by applicable law, court order, or instruction from a competent government, regulatory, or law enforcement authority, bdc33 may be obligated to disclose personal data. bdc33 will endeavour to notify you of any such disclosure where legally permissible to do so.
• Sports integrity organisations: Where bdc33 identifies evidence of match-fixing, spot-fixing, or betting-related corruption, relevant data may be shared with recognised sports integrity bodies in connection with investigations.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by bdc33 in connection with legal proceedings, compliance audits, or business operations, where such advisers are bound by confidentiality obligations.

bdc33 uses cookies and similar tracking technologies to operate the platform, ensure security, remember your preferences, and understand how users interact with our services. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform. These cookies enable core functions such as session management, login authentication, and security features. They cannot be disabled without impairing platform functionality.
• Functional cookies: Allow the platform to remember your preferences — such as your preferred language setting, display options, and notification preferences — to provide a more personalised experience.
• Analytical cookies: Used to collect aggregated, anonymised data about how visitors use the bdc33 platform — including pages visited, time spent, and navigation paths. This data helps bdc33 improve platform performance and content.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats, including session hijacking and cross-site request forgery.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. bdc33 does not currently use third-party advertising or behavioural tracking cookies.

bdc33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bdc33's servers.
• Encryption at rest for sensitive stored data including identification documents, payment details, and account credentials.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Multi-factor authentication (MFA) for all bdc33 internal systems that process personal data.
• Regular vulnerability assessments, penetration testing, and security audits by qualified professionals.
• Automated intrusion detection systems monitoring for unusual access patterns or data exfiltration attempts.
• Incident response procedures enabling bdc33 to identify, contain, and respond to data security incidents promptly.

While bdc33 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring the security of the device you use to access the platform. If you suspect that your account has been compromised, contact our support team immediately.

bdc33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

When the applicable retention period expires and no overriding legal obligation requires continued retention, bdc33 will securely delete or irreversibly anonymise the relevant data. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical analysis.

Subject to applicable law and certain limited exemptions, you have the following rights in relation to your personal data held by bdc33:

• Right of access: You may request a copy of the personal data bdc33 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. You may also update basic account information directly through your bdc33 account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that bdc33 may be required to retain certain data for legal or regulatory reasons even following an erasure request.
• Right to restriction: You may request that bdc33 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that bdc33 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where bdc33 relies on legitimate interests as its legal basis, unless bdc33 can demonstrate compelling legitimate grounds for the processing that override your rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact bdc33 support at [email protected]. We will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The bdc33 platform is strictly for adults aged 21 years and above. bdc33 does not knowingly collect personal data from individuals under the age of 21. The platform employs age verification procedures during registration and KYC review to enforce this restriction.

If bdc33 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, any balance will be handled in accordance with our responsible gaming obligations, and all associated personal data will be deleted or anonymised as promptly as possible in compliance with applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has registered on the bdc33 platform, please contact our support team immediately at [email protected]. bdc33 takes underage gambling with the utmost seriousness and will act on all such reports as a matter of priority.

As an internationally licensed offshore gaming platform serving players in Bangladesh and other jurisdictions, bdc33 may process and store personal data on servers or through service providers located outside Bangladesh. Where personal data is transferred to countries or territories that may not have equivalent data protection laws to those applicable in Bangladesh, bdc33 will ensure that appropriate safeguards are in place to protect your data.

Such safeguards may include contractual data protection clauses with recipient entities, ensuring that the recipient provides an adequate level of protection, or relying on applicable legal derogations such as your explicit consent or the necessity of the transfer for the performance of a contract with you.

By creating a bdc33 account and accepting these terms, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh in the manner described above.

The bdc33 platform does not contain links to third-party external websites for the purposes of this Privacy Policy. However, game content delivered within the platform interface by third-party providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and NetEnt may involve separate data processing by those providers in accordance with their own terms and privacy policies.

bdc33 is not responsible for the privacy practices or data processing activities of third-party game content providers. Where such providers process personal data in connection with game delivery, they do so as independent data controllers or as processors bound by data processing agreements with bdc33. We encourage you to review the privacy policies of any third-party service provider whose services you access through the bdc33 platform.

bdc33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, bdc33 will notify registered players via email or an in-platform notification prior to the changes taking effect.

The effective date at the top of this policy indicates when the current version was last reviewed and updated. We encourage you to review this Privacy Policy periodically. Your continued use of the bdc33 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdc33 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data protection team.

Email: [email protected]

Please include "Privacy Enquiry" in the subject line of your message along with a brief description of your request. Our team aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days of receipt.

If you are contacting us to exercise a specific data right — such as a request for access, rectification, erasure, or portability — please also include your registered account username or email address so that we can verify your identity and locate the relevant records promptly.