Your Privacy Matters at bd2333

1 Data We Collect

When you register and use the bd2333 platform, we collect personal data across several categories. The type of data collected depends on how you interact with our services and the stage of your account lifecycle (registration, verification, active play, withdrawal, or closure).

Identity and contact information collected at registration includes your full legal name, date of birth, residential address, email address, and a valid Bangladeshi mobile number. This information is required to create your account, verify your identity, and communicate with you about your account activity.

Identity verification documents collected during KYC (Know Your Customer) checks include copies of government-issued identification such as a National Identity Card (NID), passport, or driving licence, as well as proof-of-address documents where requested. These are required by our compliance obligations and to prevent underage gambling and fraud.

Financial data includes your payment method details (such as your bKash-registered number, Nagad account, Rocket wallet, Upay account, or bank account number), deposit history, withdrawal history, and transaction identifiers. bd2333 does not store full card numbers for Visa or Mastercard transactions; these are handled by our certified payment processing partners.

Behavioural and gaming data includes your session history, game play records, bet amounts, win/loss history, and responsible gaming tool settings (deposit limits, loss limits, session timers, and self-exclusion status). This data is used to operate the platform, detect problem gambling patterns, and fulfil our responsible gaming obligations.

Technical data automatically collected when you access bd2333 includes your IP address, device type and operating system, browser type and version, screen resolution, time-zone setting, and session timestamps. This data helps us secure your account, detect suspicious access patterns, and improve platform performance.

2 How We Use Your Data

bd2333 processes your personal data only for lawful purposes. The following table summarises the primary processing activities, the data categories involved, and the legal basis for each activity.

Where processing is based on your consent — such as receiving promotional emails about bd2333 bonuses, seasonal offers, or BPL cricket promotions — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

3 Data Sharing & Disclosure

bd2333 does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• KYC and identity verification providers: We share identity document data with licensed third-party verification services to fulfil our legal obligations to confirm the age and identity of all registered players. These providers act as data processors under strict contractual obligations.
• Payment processing partners: Financial data necessary to process deposits and withdrawals is shared with our payment partners including bKash, Nagad, Rocket, Upay, and bank transfer intermediaries. These entities process data solely to execute the financial transaction you have requested.
• Game software providers: Technical session data (such as player session tokens) is shared with game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming to facilitate game play. These providers do not receive your full identity profile.
• Fraud prevention and security services: Anonymised or pseudonymised technical data may be shared with fraud detection platforms to identify patterns consistent with account takeover, bonus abuse, or money laundering activity.
• Legal and regulatory authorities: bd2333 will disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh where required to do so by a valid legal order, court order, or regulatory directive. We will, where legally permitted, notify affected players of such disclosures.
• Business transfer: In the event that bd2333 undergoes a merger, acquisition, or asset sale, player personal data may form part of the transferred assets. Affected players will be notified in advance of any change in data controller identity and afforded the opportunity to close their accounts if they do not consent to the transfer.

4 Cookies & Tracking

bd2333 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse how players interact with our games and pages. The following categories of cookies are used on the bd2333 platform:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language setting, last-used payment method, and game lobby view preferences. They persist between sessions to provide a smoother experience on subsequent visits.
• Analytics cookies: bd2333 uses first-party analytics tools to measure page performance, game engagement rates, and session duration. This data is aggregated and anonymised before analysis and is not used to personally identify individual players.
• Responsible gaming cookies: Session timer data and activity tracking used to power responsible gaming features such as session time reminders and cooling-off enforcement are stored in session-scoped cookies and are not transmitted to third parties.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bd2333 account. Third-party advertising or retargeting cookies are not used on the bd2333 platform.

5 Data Retention

bd2333 retains personal data for the periods set out below. After each applicable retention period has elapsed, data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

Where bd2333 is required by law to retain data for longer than the periods stated above, the statutory requirement takes precedence. Where a legal dispute is ongoing at the time a retention period would otherwise expire, the relevant data will be retained until the dispute is fully resolved.

6 Your Privacy Rights

As a bd2333 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request — [Your Account ID]". We will acknowledge your request within 5 business days and provide a full response within 30 days.

• Right of access: You may request a copy of all personal data that bd2333 holds about you, along with information about how it is processed.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update most profile information directly through your account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where there is no overriding legal basis for continued processing. Note that erasure requests cannot override legal data retention obligations.
• Right to restrict processing: You may ask bd2333 to pause the processing of your data while a rectification or objection request is being assessed.
• Right to data portability: You may request a machine-readable export of the personal data you have provided to bd2333, in a structured, commonly used format.
• Right to object: You may object to the processing of your data where that processing is based on legitimate interests. bd2333 will cease such processing unless compelling legitimate grounds can be demonstrated that override your interests.
• Right to withdraw consent: Where processing is based on consent (for example, marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.

7 Data Security

bd2333 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include but are not limited to the following:

• Transport layer security: All communication between your browser or app and the bd2333 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed to ensure uninterrupted encryption.
• Data encryption at rest: Sensitive data fields — including identity document scans, payment account references, and password hashes — are encrypted in our database using industry-standard algorithms. Plain-text passwords are never stored.
• Access controls: Access to personal data within bd2333's internal systems is governed by role-based access control (RBAC). Only staff with a documented operational need to access specific data categories are granted that access. All internal access is logged and auditable.
• Two-factor authentication: bd2333 offers SMS OTP-based two-factor authentication (2FA) for all player accounts. Players are strongly encouraged to enable 2FA to provide a second layer of protection against unauthorised login attempts.
• Penetration testing and vulnerability management: bd2333's platform is subject to regular security assessments. Identified vulnerabilities are triaged and remediated according to a documented severity-based schedule.
• Incident response: In the event of a confirmed data breach affecting player personal data, bd2333 will notify affected players within 72 hours of becoming aware of the breach, where technically and legally feasible, and will take all necessary steps to contain and remediate the incident.

8 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how bd2333 has handled your personal data, please contact us using the details below. bd2333 is committed to resolving all privacy-related enquiries promptly and transparently.

Data Protection contact:
Email: [email protected]
Subject line: "Privacy Rights Request — [Your Account ID]"
Response time: Acknowledgement within 5 business days; full response within 30 days.

If you are not satisfied with bd2333's response to your complaint or privacy rights request, you have the right to escalate your complaint to the relevant data protection authority in Bangladesh. bd2333 will cooperate fully with any regulatory investigation concerning data protection compliance.

This Privacy Policy was last reviewed and updated on 1 January 2026. bd2333 reserves the right to update this policy at any time to reflect changes in our data processing practices or applicable law. Material changes will be communicated to registered players by email or in-platform notification prior to the change taking effect.