d33 Privacy Policy

d33 uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your d33 account, verifying your identity and age (21+ requirement), and managing your login credentials securely.
• Transaction processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfers, and maintaining accurate financial records.
• Platform delivery: Enabling you to access sports betting markets (including BPL, IPL, T20 World Cup, and other cricket events), live casino games, slots, and all other d33 products.
• Legal compliance: Meeting our anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other applicable legal or regulatory duties.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other violations of our Terms & Conditions.
• Customer support: Responding to your enquiries, complaints, and support requests in an accurate and timely manner.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling and to support players who have requested self-exclusion, deposit limits, or other protective measures.
• Marketing communications: Sending you relevant promotional offers, bonus notifications, and tournament announcements — only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].

d33 will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.

d33 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is required to perform our contract with you — for example, to operate your account and process your transactions.
• Legal obligation: Processing is necessary to comply with AML regulations, KYC obligations, age verification requirements, and other applicable laws.
• Legitimate interests: Processing is in our legitimate interests (and those of our users), such as fraud prevention, platform security, and improving our services — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent to process data — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

d33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data in the following limited circumstances only:

• Payment processors: We share necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard solely to process your transactions.
• Game providers: Aggregated or session-level data may be shared with third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary to deliver their games on our platform and ensure fair-play certification.
• Identity verification services: KYC and age verification providers may receive the identity documents and personal data you submit for verification purposes. These providers are contractually bound to handle your data securely and to use it only for verification.
• Legal and regulatory authorities: We may disclose your data to law enforcement agencies, financial intelligence units, or other competent authorities when required by law or in response to a lawful request.
• Business transfers: In the event of a merger, acquisition, or sale of d33's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

In all cases where data is shared with third-party processors, d33 implements appropriate contractual safeguards to ensure your data is handled in a manner consistent with this Privacy Policy.

d33 uses cookies and similar tracking technologies to operate the Platform effectively, improve user experience, and maintain security. The types of cookies we use include:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, currency display (BDT), and responsible gaming tool configurations, so you do not need to reset them on every visit.
• Analytics cookies: Collect anonymised data about how users navigate the Platform — for example, which game categories are most visited and how users move between pages. This data is used to improve the Platform's design and performance.
• Security and fraud prevention cookies: Help us detect unusual login activity, flag potentially fraudulent transactions, and enforce our one-account-per-user policy.

You may control non-essential cookies through your browser settings. However, disabling cookies may affect the functionality of certain Platform features. d33 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

d33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction, as required for financial compliance purposes.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for two (2) years following the resolution of the relevant support interaction or complaint.
• Technical and device data (logs): Retained for a maximum of twelve (12) months, unless a longer period is required for an ongoing security investigation.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

d33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the d33 Platform.
• Encrypted storage of passwords using industry-standard hashing algorithms — d33 staff cannot view your password in plain text.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular security assessments and penetration testing of the Platform's infrastructure.
• Automated monitoring systems that detect and flag unusual account activity, including login attempts from unrecognised devices or locations.
• Secure, access-controlled storage for KYC documents and other sensitive identification materials.

While d33 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, d33 will notify affected individuals without undue delay and will take immediate steps to contain the breach and mitigate its effects.

d33 operates a platform that serves players primarily located in Bangladesh. Certain data processing activities may involve servers or service providers located outside Bangladesh, for example when game data is processed by international game studios or when cloud infrastructure is used for platform operations.

Where personal data is transferred internationally, d33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy. Such safeguards may include contractual clauses binding the recipient to process data only for specified purposes and to maintain adequate security standards. d33 does not transfer personal data to jurisdictions where no adequate protections exist without first establishing appropriate contractual protections.

The d33 Platform is strictly intended for adults aged 21 years and above. d33 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If we become aware that we have inadvertently collected data from an underage individual, we will immediately close the relevant account, delete all associated personal data, and forfeit any balances held.

Parents and guardians who believe that a minor under their supervision has registered on the d33 Platform should contact us immediately at [email protected] so that the account can be closed and the data removed without delay.

d33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last updated" date shown at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how d33 protects your personal data. Your continued use of the Platform following the posting of any amendment constitutes acceptance of the revised policy. If you do not agree with the revised policy, you should cease using the Platform and request account closure by contacting [email protected].