33ook Privacy Policy — How We Handle Your Data
Your privacy matters to us. This policy explains exactly what data 33ook collects from players in Bangladesh, why we collect it, and how we keep it secure.
📋Overview
This Privacy Policy applies to all users of the 33ook platform, including visitors, registered players, and former account holders. It describes the categories of personal data that 33ook collects, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights available to you as a data subject. By accessing or using the 33ook platform, you acknowledge that you have read and understood this Privacy Policy.
33ook is committed to handling your personal data responsibly. We collect only the data that is necessary to provide and improve the platform, to verify your identity, to process financial transactions, and to meet our legal obligations. We do not sell, rent, or trade personal data to advertising networks, marketing companies, or any other commercial third party for their independent use.
1Data We Collect
When you register an account, use the 33ook platform, or contact our support team, we may collect the following categories of personal data. In all cases, we collect only the minimum data necessary for the stated purpose.
- Identity data: your full name, date of birth, and government-issued identification document details (collected during KYC verification for withdrawal processing).
- Contact data: your Bangladesh mobile phone number, which serves as your account identifier and primary communication channel.
- Financial data: transaction records including deposit and withdrawal amounts, timestamps, payment method references (e.g. the last four digits of a bKash or Nagad number), and transaction status.
- Gaming data: your betting history, game session logs, wagering patterns, bonus usage, and account balance history, which are retained for regulatory compliance, dispute resolution, and responsible gaming monitoring.
- Technical data: your device type, operating system version, browser type, IP address (used for fraud detection and geographic access controls), and session timestamps.
- Communications data: records of your support interactions with 33ook, including chat logs and any documents or screenshots you submit as part of a support request or dispute.
2How We Use Your Data
33ook processes your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with these stated purposes without your prior consent.
- Account creation and management: to create, maintain, and secure your 33ook account and to process your registration, login, and account settings changes.
- Transaction processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records in your account.
- Identity verification and fraud prevention: to verify your identity in compliance with KYC requirements, to detect and prevent fraudulent activity, money laundering, and other forms of financial crime.
- Customer support: to respond to your support requests, investigate disputes, and resolve complaints relating to your account, transactions, or gaming activity.
- Responsible gaming: to monitor gaming activity for signs of problem gambling and to implement self-exclusion, deposit limits, and session reminders requested by the player.
- Legal and regulatory compliance: to fulfil our legal obligations under applicable law, including anti-money laundering requirements, age verification obligations, and responding to lawful requests from law enforcement or regulatory authorities.
3Legal Basis for Processing
33ook processes your personal data on the following legal bases, depending on the specific processing activity involved.
- Contractual necessity: processing required to perform the contract between you and 33ook, including account creation, transaction processing, and game provision.
- Legal obligation: processing required to comply with applicable laws and regulations, including KYC/AML obligations and age verification requirements.
- Legitimate interests: processing conducted in pursuit of 33ook's legitimate business interests, including fraud prevention, platform security, and improving the player experience — provided those interests do not override your fundamental data rights.
- Consent: where processing is based on your explicit consent, such as receiving optional promotional communications. You may withdraw consent at any time by contacting 33ook support.
4Data Sharing and Disclosure
33ook does not sell or rent your personal data to third parties. We share your data only where it is strictly necessary and only with the following categories of recipient.
- Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum transaction data necessary to process your deposit or withdrawal request. These providers operate under their own privacy frameworks and are contractually required to protect your data.
- Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and other licensed game studios receive session identifiers and stake data required to operate the game you are playing. They do not receive your contact or financial details.
- Technical service providers: cloud hosting, server infrastructure, analytics, and security service providers who process data on 33ook's behalf under strict data processing agreements and are not permitted to use your data for any other purpose.
- Legal and regulatory authorities: law enforcement agencies, financial intelligence units, or other regulatory bodies when required by applicable law, a court order, or a lawful regulatory request.
5Payment Data and Financial Privacy
33ook does not store full payment credentials for any payment method. When you deposit via bKash, Nagad, Rocket, or bank transfer, the transaction is initiated and completed through the relevant payment provider's own secure interface. 33ook receives only a confirmation token, a masked reference number, and the transaction amount, which are stored in your account's transaction history for dispute resolution and regulatory compliance purposes.
Transaction records held on the 33ook platform are retained for a minimum of five years from the date of the transaction, in compliance with anti-money laundering recordkeeping obligations. After the retention period, transaction records that are no longer required will be securely deleted or anonymised.
6Cookies and Tracking Technologies
The 33ook platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and ensure the platform functions correctly on your device. We do not use third-party advertising cookies or cross-site tracking technologies.
- Essential session cookies: required for the platform to function. These cookies maintain your logged-in state, remember your language preference, and ensure that your account session is associated with your device during a gaming session. These cannot be disabled without breaking core platform functionality.
- Performance and analytics cookies: used to measure how players interact with the platform (pages visited, features used, error rates) so that 33ook can identify and fix technical issues and improve the overall player experience. Data collected via these cookies is aggregated and not linked to individual user identities.
- Security cookies: used to detect suspicious activity, prevent automated abuse, and protect the integrity of the platform. These include tokens that verify that requests are being made by a human user and not an automated script.
7Data Retention
33ook retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or for as long as is required by applicable law, whichever is longer. The following general retention periods apply.
Account and identity data is retained for the duration of your account and for a minimum of five years after account closure, in compliance with anti-money laundering and KYC recordkeeping requirements. Gaming and transaction records are retained for five years. Communications data (support logs) is retained for two years from the date of each interaction. Technical data (IP logs, device data) is retained for up to twelve months. Where you request deletion of your personal data and no legal retention obligation applies, we will action your request within 30 days.
8Data Security
33ook implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. Our security posture is reviewed regularly and updated in response to emerging threats.
- SSL/TLS encryption on all data transmitted between your device and 33ook servers, ensuring that your login credentials, session data, and account information cannot be intercepted in transit.
- Encryption at rest for sensitive personal data fields stored in our databases, including identity document references and account credentials.
- Access controls ensuring that only authorised 33ook personnel with a legitimate operational need can access account data, and that all such access is logged and audited.
- Automated fraud detection systems that monitor account activity in real time and flag unusual patterns (e.g. rapid multiple login attempts, transactions from unexpected geographic locations) for manual review.
9Your Data Rights
As a user of the 33ook platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact 33ook support using the contact details at the end of this Privacy Policy. We will respond to all verified requests within 30 days.
-
Right to AccessYou have the right to request a copy of the personal data that 33ook holds about you, along with information about how it is being used.
-
Right to RectificationYou have the right to request correction of any personal data we hold about you that is inaccurate or incomplete.
-
Right to ErasureYou have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligation.
-
Right to ObjectYou have the right to object to the processing of your personal data where that processing is based on legitimate interests, and to withdraw any consent you have previously given.
-
Right to Data PortabilityYou have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another service provider where technically feasible.
10Protection of Minors
The 33ook platform is strictly for adults aged 21 and above. 33ook does not knowingly collect personal data from any person under 21 years of age. If we discover that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended, all gaming activity voided, and all personal data associated with the account will be deleted as soon as practicable, subject only to any overriding legal retention requirement. If you believe a minor has registered an account on 33ook, please contact our support team immediately.
11Third-Party Links and Services
The 33ook platform integrates games and services from licensed third-party game providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming. While 33ook takes care to partner only with reputable, regulated providers, each provider operates its own privacy and data security practices within their game environments. 33ook is not responsible for the data practices of third-party game providers. We encourage you to review the privacy documentation of any third-party provider whose games you play on the 33ook platform.
12Changes to This Privacy Policy
33ook reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players via a notice on the platform or by direct communication to your registered mobile number. The updated Privacy Policy will take effect from the date stated at the top of the document. Continued use of the platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may request account closure by contacting 33ook support.
13Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact the 33ook support team. Support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).