Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how bcd33 ("we", "us", "our", or "the Company") collects, processes, stores, and protects the personal information of users ("you", "your", "Player") who access or use the bcd33 online betting platform, available at bcd33.onl and any associated mobile applications or services (collectively, "the Platform").

This policy applies to all personal data collected through the bcd33 Platform, including data provided during account registration, identity verification, deposits, withdrawals, customer support interactions, and general platform usage. It covers players located in Bangladesh and any other jurisdiction where bcd33 operates.

By registering a bcd33 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must stop using the Platform and may request account closure by contacting our support team.

We may update this Privacy Policy periodically to reflect changes in our data practices, technology, legal requirements, or business operations. We will notify you of material changes by posting a notice on the Platform or via email to your registered address. The "Last Updated" date at the top of this policy indicates when the most recent revision was made.

2. Personal Data We Collect

bcd33 collects personal data through several channels, including information you provide directly, data generated automatically by your use of the Platform, and information obtained from trusted third-party sources for identity verification and fraud prevention purposes.

2.1 Data You Provide Directly

When you register an account or update your profile, we collect:

• Identity Information: Full legal name, date of birth, National ID Card number or Passport number, and a photograph or scan of your identity document
• Contact Information: Bangladesh mobile phone number, email address, and residential address (including district and division)
• Account Credentials: Username and encrypted password (we never store passwords in plain text)
• Financial Information: bKash mobile number, Nagad number, Rocket number, Upay number, or bank account details used for deposits and withdrawals
• Source of Funds: For large transactions, we may request information about the origin of funds to comply with anti-money laundering obligations

2.2 Data Generated Automatically

When you use the bcd33 Platform, we automatically collect:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, games played, bets placed, time spent on each section, click patterns, and navigation paths
• Transaction Data: Deposit and withdrawal history, bet history, game history, win/loss records, and bonus usage
• Session Data: Login timestamps, session duration, logout events, and failed login attempts
• Communication Data: Records of live chat conversations, support ticket history, and email correspondence with bcd33 support

2.3 Data from Third Parties

We may receive personal data from the following categories of third parties:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners
• Identity Verification Services: Results of document checks and facial recognition matches performed by our verification partners
• Fraud Prevention Providers: Risk scores, device fingerprint data, and fraud indicators from anti-fraud systems
• Analytics Providers: Aggregated usage statistics from web analytics tools (processed in anonymized or pseudonymized form)

3. How We Use Your Personal Data

All data processing activities are governed by strict internal policies that limit access to authorized personnel only. Our employees sign confidentiality agreements and are trained on data protection principles. We implement role-based access controls so staff can only view the data necessary for their specific job function.

4. When We Share Your Personal Data

bcd33 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we do share data with trusted service providers and partners under strict contractual obligations to support Platform operations:

4.1 Essential Service Providers

• Payment Processors: bKash, Nagad, Rocket, Upay, and Bangladesh banking partners receive the minimum data necessary to process your deposits and withdrawals (name, account number, transaction amount)
• Identity Verification Services: Third-party verification providers receive copies of your ID documents and selfie photos to confirm your identity and age during KYC checks
• Cloud Hosting Providers: Our platform infrastructure is hosted on secure cloud servers; hosting providers have limited technical access to encrypted data backups but cannot view content without authorization
• Customer Support Tools: Support ticket and live chat platforms store your communication history to enable our team to assist you effectively

4.2 Legal and Regulatory Sharing

We may disclose your personal data to government authorities, law enforcement agencies, or regulators when required by law, including:

• Responding to valid court orders, subpoenas, or legal process
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) reporting obligations
• Cooperating with criminal investigations involving fraud, match-fixing, or other illegal activities
• Enforcing our Terms and Conditions or protecting the rights and safety of bcd33, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, corporate sale, or transfer of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and post a notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

bcd33 employs industry-leading technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and bcd33 servers uses 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment details) is encrypted using AES-256 encryption
• Firewall Protection: Our servers are protected by multi-layered firewalls and intrusion detection systems that monitor for suspicious activity 24/7
• Access Controls: Employee access to personal data is restricted based on job role and requires multi-factor authentication
• Regular Security Audits: We conduct quarterly security audits and penetration testing to identify and fix vulnerabilities
• Data Minimization: We automatically delete or anonymize data that is no longer needed for its original purpose
• Incident Response: In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours and provide guidance on protective measures

While we implement robust security controls, no online system can be guaranteed completely secure. You also have a responsibility to protect your account by using a strong, unique password, enabling two-factor authentication if available, and never sharing your login credentials with others.

6. How Long We Keep Your Data

bcd33 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are:

• Account Data: Retained for the duration of your account plus 5 years after closure to comply with financial regulations and AML requirements
• Transaction Records: Stored for 7 years after the transaction date as required by Bangladesh banking and tax laws
• Identity Documents: Held for 5 years after account closure for regulatory compliance and fraud prevention
• Marketing Data: Deleted immediately upon opt-out request or within 2 years of your last active engagement if you have not opted out
• Support Communications: Archived for 3 years to maintain a history of your interactions and resolve future disputes
• Session Logs: Automatically deleted after 90 days unless needed for active fraud investigation

After the retention period expires, personal data is securely deleted or anonymized so it can no longer identify you. You can request early deletion of certain data categories by contacting support, subject to our legal retention obligations.

7. Your Privacy Rights

You have the following rights regarding your personal data held by bcd33:

• Right to Access: Request a copy of all personal data we hold about you, including account information, transaction history, and communications
• Right to Rectification: Correct inaccurate or incomplete personal data in your account profile (you can also update most details directly in your account dashboard)
• Right to Erasure: Request deletion of your personal data in certain circumstances, subject to legal retention requirements
• Right to Restrict Processing: Request temporary limitation of how we use your data while we verify accuracy or resolve a complaint
• Right to Data Portability: Receive your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service
• Right to Object: Object to processing based on legitimate interests, particularly for marketing or profiling purposes
• Right to Withdraw Consent: If we rely on your consent as the legal basis for processing, you can withdraw that consent at any time

To exercise any of these rights, email [email protected] with your request and account username. We will respond within 30 days with either the requested information, an explanation of any limitations, or instructions for next steps. There is no fee for exercising your privacy rights unless your request is clearly unfounded, repetitive, or excessive.

8. Cookies and Tracking Technologies

bcd33 uses cookies, web beacons, and similar technologies to enhance your experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functions like login, session management, and security. These cannot be disabled without breaking core functionality
• Performance Cookies: Collect anonymous data about how you use the Platform (pages visited, errors encountered) to improve performance
• Functional Cookies: Remember your preferences (language, currency, favorite games) to personalize your experience
• Targeting Cookies: Track your activity across the Platform to deliver relevant promotions and recommendations (only used if you have opted in to marketing)

8.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will prevent you from using core Platform features. Consult your browser's help documentation for instructions on managing cookies.

9. International Data Transfers

bcd33 primarily operates within Bangladesh and stores your data on servers located in secure data centers within Asia. However, some of our service providers (payment processors, cloud infrastructure, identity verification) may be based outside Bangladesh and may process your data in their home countries.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by international data protection authorities, encryption during transit, and binding commitments from recipients to uphold equivalent data protection standards.

10. Children's Privacy

bcd33 is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that we have inadvertently collected data from a minor, we will delete that information immediately and close the associated account.

Parents and guardians who believe their child has provided personal data to bcd33 should contact [email protected] immediately. We will verify the concern and take prompt action to remove the data and block further access.

11. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our data protection team:

• Email: [email protected] (plain text, not clickable)
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 72 hours

For formal complaints regarding data handling, you may also have the right to file a complaint with your local data protection authority or consumer protection agency in Bangladesh.