bw33 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how bw33 ("bw33", "we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "your") who access and use the bw33 platform located at https://bw33.io (the "Platform"), including any associated mobile-optimised versions or subdomains.

bw33 is committed to handling your personal data with integrity, transparency, and respect. We understand that players in Bangladesh place significant trust in us when they share personal and financial information, and we take that responsibility seriously. This Policy explains, in plain language, exactly how your data is used and what controls you have over it.

By registering an account, accessing the Platform, or continuing to use any bw33 services, you acknowledge that you have read and understood this Privacy Policy. This Policy forms an integral part of the bw33 Terms & Conditions. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

bw33 collects personal data across several categories. The table below provides a structured overview of the types of data we hold about you.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health information, except where you voluntarily disclose such information in the context of a responsible gaming assessment or support interaction.

bw33 collects personal data through the following channels:

• Direct submission: When you register an account, complete identity verification, make a deposit or withdrawal request, contact our support team, or respond to a promotion, you provide data directly to us.
• Automatic collection: When you navigate the Platform, our servers and analytics tools automatically record technical data such as your IP address, device type, browser version, session duration, pages visited, and actions taken within the Platform.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, transaction confirmation data is returned to bw33 by those payment processors to allow us to credit your account balance and maintain financial records.
• Third-party game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session data and game outcome data with bw33 for the purposes of jackpot tracking, dispute resolution, and responsible gaming monitoring.
• Cookies and tracking technologies: bw33 uses first-party cookies, session storage, and similar technologies to maintain your login session, remember preferences, and analyse Platform usage patterns. See Section 7 for full details.
• Identity verification providers: Where required to complete KYC (Know Your Customer) checks, bw33 may use third-party verification services that cross-reference the identity documents you submit against authoritative databases.

bw33 uses your personal data for the following specific and clearly defined purposes:

• Account creation and management: To register your account, verify your identity, maintain your profile, and manage your session security.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, reconcile balances, and issue transaction confirmations in BDT.
• Fraud prevention and security: To detect and investigate suspicious account activity, prevent multiple-account abuse, identify money laundering risk, and protect the integrity of the Platform.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance.
• Responsible gaming: To monitor your gambling patterns for signs of problem gambling behaviour, apply your deposit limits, process self-exclusion requests, and trigger reality-check notifications.
• Promotional communications: Where you have provided explicit consent, to send you information about bonuses, promotions, seasonal offers (including Eid, BPL season, Pohela Boishakh offers), and platform updates via SMS, email, or messaging apps.
• Platform improvement: To analyse aggregated, anonymised usage data to identify performance issues, improve game selection, optimise the user interface, and enhance the overall player experience.
• Legal and regulatory compliance: To maintain records required under applicable financial regulation, respond to lawful requests from authorities, and enforce our Terms & Conditions.

bw33 does not use your data to make fully automated decisions that produce significant legal effects without human oversight. Any automated fraud-flagging or responsible gaming alerts are reviewed by a qualified member of the bw33 team before action is taken against an account.

bw33 relies on the following legal bases when processing your personal data:

• Contractual necessity: The majority of data processing activities are necessary for the performance of the contract between you and bw33 — specifically, to operate your betting account, process transactions, and provide access to platform services.
• Legitimate interests: bw33 processes technical and gaming data based on its legitimate interests in fraud prevention, platform security, responsible gaming oversight, and improving services — provided those interests do not override your fundamental privacy rights.
• Legal obligation: Certain data, particularly financial transaction records and identity verification documents, must be retained by bw33 to comply with applicable anti-money laundering (AML) obligations and financial record-keeping requirements.
• Consent: Marketing communications and non-essential cookies are processed solely on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

bw33 does not sell, rent, or commercially trade your personal data to any third party. We share personal data only in the following limited and necessary circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard receive the transactional data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by their respective data protection standards.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and relevant session data to operate their games and resolve jackpot or RNG disputes.
• Identity verification services: Where KYC verification is required, relevant portions of the identity documents you provide may be shared with an authorised third-party verification provider for document authentication purposes only.
• IT infrastructure and security providers: bw33 uses third-party hosting, content-delivery, and cybersecurity services whose staff may have incidental access to data as part of their service delivery. These providers are bound by strict data-processing agreements and may not use your data for any independent purpose.
• Legal and regulatory authorities: bw33 will disclose personal data to law enforcement or regulatory bodies where required to do so by law, court order, or other binding legal process. Where permitted, we will notify you of such a request before complying.
• Business transfers: In the event that bw33 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer and given an opportunity to close your account if you do not wish your data to be transferred.

bw33 uses cookies and similar client-side storage technologies to maintain Platform functionality and collect anonymised usage analytics. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These cookies maintain your login session, store your language preference, and enable the cashier and game-launch systems to operate. They cannot be disabled without breaking core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including which game categories are most visited, typical session lengths, and navigation paths. This data is never linked back to your personal identity.
• Fraud prevention cookies: Used to generate a device fingerprint that helps bw33 identify and prevent account sharing, automated scripting, and multi-account abuse.
• Preference cookies: Store your Platform configuration choices, such as your preferred deposit method, game lobby filters, and responsible gaming tool settings, so they persist between sessions.

bw33 does not use third-party advertising cookies or cross-site tracking cookies. You will not be tracked across other websites as a result of using the bw33 Platform. You can manage or delete cookies through your browser settings at any time, though disabling essential cookies will impair your ability to use the Platform.

bw33 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a period of 5 years following account closure, to satisfy financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of 5 years from the date of submission, in accordance with standard AML record-keeping obligations.
• Transaction records: Retained for 7 years to support financial auditing, dispute resolution, and regulatory compliance.
• Customer support communications: Retained for 3 years from the date of the most recent interaction, to support ongoing dispute resolution and training.
• Marketing consent records: Retained for the duration of your marketing subscription plus 2 years following withdrawal of consent, to demonstrate compliance with consent obligations.
• Anonymised analytics data: May be retained indefinitely in aggregated, anonymised form that cannot be linked to any individual user.

When data is no longer required for any legitimate purpose, bw33 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

As a bw33 user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of access: You may request a copy of all personal data bw33 holds about you, along with information about how it is used and to whom it has been disclosed.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure ("right to be forgotten"): You may request that bw33 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Note that certain data must be retained to meet legal obligations and cannot be erased on request.
• Right to restriction of processing: You may ask bw33 to restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interests, in which case bw33 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The bw33 Platform is strictly intended for adults aged 21 years and above. bw33 does not knowingly collect personal data from individuals below this age. Our registration process includes mandatory date-of-birth verification, and accounts flagged as belonging to underage individuals will be immediately suspended pending investigation.

If you are a parent or guardian and believe that your child has registered an account with bw33 or provided personal data without your knowledge or consent, please contact us immediately at [email protected]. We will investigate the matter promptly and, if confirmed, will delete all associated data and close the account without delay.

bw33 takes the protection of minors extremely seriously and invests in ongoing monitoring systems designed to identify and prevent underage access to the Platform.

bw33 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport-layer encryption: All data in transit between your device and bw33 servers is encrypted using 256-bit SSL/TLS technology. Our connection certificates are renewed regularly and monitored for validity.
• Data-at-rest encryption: Personal and financial data stored in bw33 databases is encrypted at rest using AES-256 encryption standards, ensuring that raw data is unreadable without the appropriate decryption keys.
• Access controls: Internal access to personal data is governed by a strict role-based access control policy. Only authorised staff members with a legitimate operational need may view personal data, and all access events are logged.
• Two-factor authentication (2FA): All bw33 administrative accounts require multi-factor authentication. We also encourage players to enable 2FA on their accounts for an additional layer of protection.
• Intrusion detection and monitoring: bw33 employs automated intrusion detection systems that monitor for unusual access patterns, brute-force attempts, and other indicators of compromise on a 24/7 basis.
• Regular security audits: Our platform undergoes periodic third-party security assessments and penetration testing to identify and address vulnerabilities proactively.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights, bw33 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the incident.

While bw33 employs robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for logging out of your account when using shared devices.

The bw33 Platform integrates services from third-party providers to deliver game content, process payments, and support platform operations. This Policy applies only to data processing carried out by bw33 directly. The following third-party providers operate under their own privacy policies, which govern how they handle data shared with them by bw33:

• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game developers whose titles are available on the bw33 Platform.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard.
• KYC / identity verification providers: Third-party services engaged to authenticate identity documents submitted during account verification.
• Infrastructure providers: Cloud hosting, content delivery network (CDN), and cybersecurity service providers that support bw33's technical operations.

bw33 conducts due diligence on all third-party providers and enters into data-processing agreements that require them to handle personal data securely and only for the purposes specified by bw33. We do not permit third-party providers to use your personal data for their own independent commercial purposes.

bw33 reviews and updates this Privacy Policy periodically to reflect changes in our data-processing practices, applicable legal obligations, or operational requirements. When a material change is made to this Policy — meaning a change that significantly affects your rights or the way your data is processed — we will notify you via a prominent notice on the Platform or by email to your registered address at least 14 days before the change takes effect.

Non-material updates (such as clarifications of existing text, corrections of typographical errors, or additions of newly integrated third-party providers with equivalent data-handling standards) will be reflected in the "Last updated" date at the top of this Policy without separate notification.

Your continued use of the bw33 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should close your account and discontinue use of the Platform before the effective date of the changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bw33 has handled your personal data, please contact our Privacy team using the details below:

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 directly through the bw33 Platform
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and provide a full response within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. bw33 is committed to cooperating fully with any such regulatory enquiry.