33ko Privacy Policy — Your Data, Your Rights

Introduction

This Privacy Policy governs how 33ko handles personal data collected from all registered players and site visitors.

33ko ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 33ko website at https://33ko.pro. This Privacy Policy describes how we collect personal information, the purposes for which we use it, the circumstances under which we may share it with third parties, the security measures we apply to keep it safe, how long we retain it, and the rights available to you as a data subject.

By registering an account, making a deposit, or continuing to browse the 33ko platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with any part of this Policy, you should not use the platform. This Privacy Policy should be read alongside the 33ko Terms and Conditions, which together form the full agreement governing your use of the platform.

Categories of Personal Data We Collect

Six types of data that 33ko may collect from players using the platform.

How We Collect Personal Data

33ko collects personal data through the following channels and interactions.

33ko collects personal data directly from you, automatically through your use of the platform, and in certain circumstances from third-party sources such as payment processors and identity verification service providers. The primary methods of collection are described below.

• Registration form: when you create a 33ko account, you provide your mobile number, chosen username, password, and date of birth. This information is submitted directly to 33ko's registration system and stored securely in our player database.
• Payment transactions: when you make a deposit via bKash, Nagad, Rocket or another supported Bangladeshi payment method, the mobile wallet number or bank account reference used for the transfer is recorded alongside the transaction amount, date, and time.
• Platform activity: your in-session behaviour on 33ko — including the games you play, the bets you place, the pages you visit, and the duration of your sessions — is recorded automatically as part of normal platform operation. This data is used for fraud prevention, responsible gaming monitoring, and service improvement.
• Customer support: when you contact 33ko support via the email address listed in the footer, the content of your message, your contact details, and our response are stored as part of your support record. This allows us to resolve disputes, track complaint outcomes, and improve our support quality.

How We Use Your Personal Data

33ko uses personal data only for the purposes described below and does not sell data to third parties.

The personal data collected through your registration, payment activity, and use of the 33ko platform is used for the following specific purposes. 33ko processes your data only where there is a lawful basis for doing so, and we do not use your personal data for purposes that are incompatible with those listed here.

• Account management: to create and maintain your player account, authenticate your identity at login, process password resets, and communicate account-related notifications to your registered mobile number.
• Payment processing: to facilitate deposits from and withdrawals to your bKash, Nagad, Rocket or other registered Bangladeshi payment method; to record transaction histories; and to investigate any payment discrepancies or failed transfers reported by you or detected by our systems.
• Legal compliance and fraud prevention: to verify your age and identity in accordance with our KYC obligations; to detect, investigate and prevent fraud, money laundering, and other financial crimes; and to comply with any applicable reporting obligations to regulatory or law enforcement authorities.
• Responsible gaming: to monitor your gaming activity for patterns that may indicate problem gambling behaviour, to apply deposit limits or cooling-off periods that you have set via your account settings, and to carry out age verification checks to ensure compliance with the 21+ age requirement.
• Platform improvement and analytics: to analyse aggregated usage patterns — such as which game categories are most popular, at what times players are most active, and which platform features generate the most engagement — in order to improve the quality and relevance of the 33ko platform for Bangladesh players.
• Promotional communications: to send you bonus offers, promotional campaigns, and seasonal promotions relevant to the Bangladesh market — such as Eid and BPL cricket season campaigns — where you have not opted out of marketing communications. You may opt out at any time by contacting 33ko support.

Legal Basis for Processing

33ko processes personal data only where a valid lawful basis exists under applicable data protection principles.

33ko processes your personal data on the following lawful bases: (a) Contract performance — processing necessary to fulfil our obligations under the Terms and Conditions you agreed to when registering your account, including account management, bet settlement, and withdrawal processing; (b) Legal obligation — processing required to comply with applicable anti-money laundering regulations, age verification requirements, and other regulatory obligations; (c) Legitimate interests — processing for fraud prevention, platform security, and service analytics where those interests are not overridden by your fundamental privacy rights; and (d) Consent — where we send you marketing communications, we rely on your consent as provided at registration. You may withdraw marketing consent at any time.

Sharing Your Personal Data

33ko does not sell, rent, or trade personal data. Sharing is limited to the specific operational categories below.

33ko may share your personal data with third parties only in the limited circumstances described below. In all cases, third-party recipients are bound by confidentiality obligations and are permitted to use your data only for the specific purpose for which it was shared. 33ko does not transfer personal data to parties located outside the regions reasonably necessary to operate the platform.

Categories of third-party recipients

• Payment processors: bKash, Nagad, Rocket, Upay and DBBL process payment transactions on our behalf. The minimum data required to execute the transaction — wallet number, amount, reference — is shared with the relevant provider to process each deposit and withdrawal.
• Identity verification providers: where KYC checks are required, we may share identity document data with a third-party verification service to confirm authenticity. These providers are contractually prohibited from using your data for any purpose other than the verification task.
• Game providers: game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe and Microgaming may receive player session identifiers to facilitate gameplay, bet settlement, and progressive jackpot tracking. No directly identifiable personal data such as your name or phone number is shared with game studios.
• Regulatory and law enforcement authorities: 33ko may be required by applicable law to disclose personal data to government bodies, financial intelligence units, or law enforcement agencies. Any such disclosure will be made only to the extent required by law and with appropriate records maintained.

Payment Data and KYC Information

Financial and identity data are handled with the highest level of care and retained only for as long as legally required.

All payment-related data — including mobile wallet numbers, transaction amounts, dates, and references — is stored in an encrypted database with access restricted to authorised personnel only. Payment data is used exclusively for the purposes of processing your transactions, resolving payment disputes, and complying with anti-money laundering record-keeping requirements. 33ko does not store full bKash or Nagad PINs, OTP codes, or any authentication credentials related to your mobile money account.

KYC documents submitted by players — typically a photograph of a national ID card (NID) or passport — are stored in isolated, encrypted document storage with a strict access log. These documents are retained for the period required by applicable compliance regulations and are then securely destroyed. If your KYC verification was unsuccessful, submitted documents will be deleted within 30 days of the final determination unless retention is required by law.

Cookies and Tracking Technologies

33ko uses cookies to keep the platform functional, personalised, and secure for every player session.

When you access 33ko via your mobile browser or any other device, certain cookies and similar tracking technologies may be placed on your device. Cookies are small text files that allow the platform to recognise your device across sessions, remember your preferences, and deliver a consistent experience. 33ko uses three categories of cookies:

• Strictly necessary cookies: these are essential for the platform to function. They maintain your login session, secure your account during activity, and enable core platform features such as the game lobby and payment screens. These cookies cannot be disabled without rendering the platform non-functional.
• Preference cookies: these remember your language setting, display preferences, and any responsible gaming limits you have configured in your account settings, so that your chosen configuration is applied consistently across sessions.
• Analytics cookies: these collect anonymised or pseudonymised data about how players interact with the platform — which games are played, how long sessions last, and which pages generate the most visits — to help 33ko improve platform performance and content relevance for Bangladesh players.

Most mobile browsers allow you to manage cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies will impair platform functionality. Disabling analytics or preference cookies will not prevent you from using 33ko but may affect your experience. 33ko does not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites.

Data Retention

33ko retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet legal obligations.

Account data — including your registration details, transaction history, and gaming activity logs — is retained for as long as your account is active and for a minimum of five years following account closure. This retention period reflects standard financial record-keeping requirements applicable to online payment-processing platforms operating in the Bangladesh market. After the retention period expires, account data is securely and irreversibly deleted from all 33ko systems.

Marketing consent records and opt-out preferences are retained indefinitely to ensure that players who have opted out of promotional communications are not contacted in error in the future. Support correspondence is retained for two years from the date of the most recent interaction. Analytics data is stored in aggregated, anonymised form and is not subject to the same retention limits as personally identifiable data.

Your Rights as a Data Subject

You have meaningful rights over your personal data and 33ko is committed to honouring them.

As an individual whose personal data is processed by 33ko, you hold the following rights in respect of that data. To exercise any of these rights, contact 33ko support at the email address displayed in the footer of this website. We will acknowledge your request within 5 business days and aim to fulfil it within 30 days.

• Right of access: you may request a copy of the personal data that 33ko holds about you, together with information about how it is used and with whom it has been shared. We will provide this in a clear, readable format within 30 days of a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete — for example, a misspelled name or an outdated mobile number — you may request that we correct or complete it. In most cases, you can update contact information directly in your account settings.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain data for the minimum statutory retention period.
• Right to restriction: you may request that we restrict processing of your personal data — for example, while a dispute about accuracy is pending — which means we will store your data but not actively process it for other purposes during the restriction period.
• Right to object to marketing: you have an absolute right to object to the use of your personal data for direct marketing purposes at any time. Once an objection is received, we will cease all marketing communications to you immediately and update our records to reflect your preference.

Data Security Measures

33ko applies industry-standard technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.

33ko uses SSL (Secure Sockets Layer) encryption across all pages of the platform to protect data in transit between your device and our servers. Data at rest — including player account records, transaction histories, and KYC documents — is encrypted using AES-256 standard encryption within our database infrastructure. Access to personal data is restricted to a limited number of authorised 33ko personnel who require access to perform their job functions, and all access events are logged for audit purposes.

33ko conducts periodic security reviews of its data handling processes. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 33ko will notify affected users as soon as reasonably practicable and will take immediate steps to contain and remediate the breach. Where required by applicable law, relevant authorities will also be notified.

Children and Underage Users

33ko does not knowingly collect data from individuals under the age of 21.

The 33ko platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If we discover that personal data has been collected from an underage user, we will delete that data promptly and close the associated account. If you are a parent or guardian and believe that a minor has registered on 33ko using their own or your details, please contact us immediately at the support email in the footer of this website so we can investigate and act without delay.

Changes to This Privacy Policy

33ko may update this Privacy Policy when required by changes to our practices or applicable law.

33ko reserves the right to amend this Privacy Policy at any time. When we make changes, the revised "last updated" date at the top of this page will be updated to reflect the date of the most recent revision. If the changes are material — for example, a new category of data collection, a new sharing arrangement with a third party, or a significant change to how we handle your rights — we will endeavour to notify registered players via a prominent notice on the platform before the change takes effect. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

Contact Us About Your Privacy

For any privacy-related questions, requests, or concerns, contact the 33ko support team directly.

If you have any questions about this Privacy Policy, wish to exercise your data rights, want to report a suspected data breach, or have a concern about how 33ko handles your personal information, please contact us using the email address displayed in the footer of this website. We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject access requests, please include your registered mobile number and a brief description of the information you are seeking so that we can locate your records efficiently.