Privacy Policy — bzd33

For the purposes of this Privacy Policy, bzd33 — accessible at bzd33.app — is the data controller responsible for the personal information collected through the platform. As the data controller, bzd33 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact our data protection team directly:

Contact Detail	Information
Platform Name	bzd33
Website	bzd33.app
Support Email	[email protected]
Privacy Requests	[email protected] — subject line: "Privacy Request"
Response Time	Within 5 business days for privacy-related requests
Operating Market	Bangladesh — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar

This Privacy Policy applies to all users of the bzd33 platform — including registered account holders, visitors who have not yet registered, and any individual whose data bzd33 may receive from third-party payment providers such as bKash, Nagad, or Rocket in connection with a transaction.

bzd33 collects personal data through several channels: directly from you when you register or use the platform, automatically through technical systems as you interact with our website, and from trusted third-party service providers involved in payment processing and identity verification. The categories of data we collect are detailed below.

2.1 — Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile phone number, and preferred currency. This data is mandatory to open and maintain a bzd33 account.
• Identity Verification (KYC) Data: Government-issued ID documents (National ID card, passport, or driver's licence), proof of address, and selfie photographs used to confirm your identity and age in accordance with our responsible gaming and anti-fraud policies.
• Financial Data: Payment method details including bKash account number, Nagad account number, Rocket mobile banking number, bank account details, or cryptocurrency wallet addresses used for deposits and withdrawals. bzd33 does not store full card numbers for Visa or Mastercard transactions — these are handled directly by PCI-DSS compliant payment processors.
• Communications Data: Records of your correspondence with bzd33 support, including live chat transcripts, emails, and any attachments you submit. These records are retained to resolve disputes and improve our support quality.
• Responsible Gaming Preferences: Deposit limits, session time settings, loss limits, cool-off periods, and self-exclusion elections you configure through your account settings.

2.2 — Data Collected Automatically

• Device and Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and device identifiers used for security monitoring and fraud prevention.
• Usage and Behavioural Data: Pages visited, games played, bet amounts, session duration, click patterns, and navigation paths within the bzd33 platform. This data is used for product improvement, personalisation, and responsible gaming monitoring.
• Geolocation Data: Approximate geographic location derived from your IP address. bzd33 uses this data to detect access from Prohibited Jurisdictions and to tailor content to your region.
• Cookie and Tracking Data: Data collected through cookies, web beacons, pixel tags, and similar technologies. See Section 5 (Cookies) for full details.

2.3 — Data Received from Third Parties

• Payment Providers: Confirmation of transaction status, payment method verification, and fraud flags received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners.
• Identity Verification Partners: Results of automated document checks and database matches performed by our KYC technology partners.
• Game Providers: Game session data, round results, and RTP statistics received from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of dispute resolution and fair-play auditing.

bzd33 processes your personal data only where we have a valid legal basis for doing so. The primary legal bases we rely upon are: performance of a contract (operating your account), compliance with legal obligations, legitimate business interests, and your explicit consent (for marketing communications only).

Purpose	Data Used	Legal Basis
Account registration and management	Registration data, device data	Contract performance
Age and identity verification (KYC)	KYC documents, date of birth, selfie	Legal obligation / Contract
Processing deposits and withdrawals	Financial data, payment method details	Contract performance
Fraud prevention and security monitoring	IP address, device ID, usage data	Legitimate interest
Responsible gaming monitoring and interventions	Betting behaviour, session data, RG preferences	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account history	Contract performance / Legitimate interest
Regulatory compliance and AML reporting	Transaction data, KYC data	Legal obligation
Product improvement and analytics	Usage and behavioural data (anonymised where possible)	Legitimate interest
Personalised promotions and bonus offers	Betting history, preferences, registration data	Consent / Legitimate interest
Marketing communications (email, SMS)	Email address, phone number	Consent

bzd33 does not use automated decision-making processes that produce legal or similarly significant effects on players, except in the context of fraud detection and anti-money-laundering checks where automated flagging is legally required. In those cases, you have the right to request human review of any automated decision that affects your account.

bzd33 does not sell, rent, or trade your personal data. We share personal data with third parties only where necessary to operate the platform, comply with legal obligations, or protect the safety of our users. The categories of recipients are as follows:

4.1 — Payment Service Providers

We share transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and cryptocurrency settlement networks. These providers receive only the data necessary to process the specific transaction and are contractually obligated to protect it.

4.2 — Identity Verification Partners

KYC document data is shared with our third-party identity verification partners who perform automated document authentication and database checks. These partners are bound by strict data processing agreements and may not use your data for any purpose other than verification on bzd33's behalf.

4.3 — Game Technology Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and bet data in order to deliver their games. They do not receive your full personal profile. Game-round records are retained by providers for audit and dispute resolution purposes.

4.4 — IT Infrastructure and Security Providers

bzd33 uses cloud hosting, content delivery networks, DDoS protection, and analytics platforms to operate and secure the site. These providers may process technical data (IP addresses, usage logs) as part of delivering their services. All such providers are subject to data processing agreements.

4.5 — Legal and Regulatory Authorities

bzd33 may disclose personal data to law enforcement agencies, financial regulators, or courts where required by applicable law, a valid court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to a person.

bzd33 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session, to detect fraud, and to understand how players interact with our content. By continuing to use bzd33 after being informed of our cookie practices, you consent to the use of cookies as described in this section.

Types of cookies we use:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember language and currency preferences, enable secure platform navigation. These cookies cannot be disabled — the platform cannot function without them.	Session / up to 30 days
Security & Fraud Detection	Device fingerprinting, IP monitoring, bot detection, and session integrity verification to protect your account and the platform from unauthorised access.	Session / up to 1 year
Analytics & Performance	Anonymised data on page views, session duration, navigation paths, and error rates. Used to improve platform performance and user experience.	Up to 2 years
Functional / Preference	Remember your responsible gaming settings, display preferences, and last-visited game category so your experience is consistent across sessions.	Up to 1 year
Marketing / Personalisation	Track which promotions you have viewed and clicked to personalise bonus offers and ensure you do not see the same promotion repeatedly. Used only with your consent.	Up to 90 days

Managing Cookies: You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will impair the functionality of the bzd33 platform and may prevent you from logging in or placing bets.

bzd33 retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Regulatory compliance, AML obligations
KYC identity documents	Duration of account + 5 years after closure	Legal obligation, fraud prevention
Transaction records (deposits & withdrawals)	7 years from transaction date	Financial regulatory requirements
Game history and bet records	5 years from date of game round	Dispute resolution, fair-play auditing
Support communications	3 years from last interaction	Quality assurance, dispute resolution
Marketing consent records	Until consent is withdrawn + 2 years	Evidence of lawful processing basis
Technical logs (IP, device, access logs)	12 months from collection	Security monitoring, fraud investigation
Self-exclusion records	Permanent (never deleted)	Responsible gaming — prevent re-registration during exclusion

At the end of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to you. Anonymised or aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and research purposes.

bzd33 respects your right to control your personal data. You may exercise any of the following rights at any time by contacting our support team at [email protected] with the subject line "Privacy Request". We will respond within five business days and resolve your request within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data bzd33 holds about you. We will provide this in a structured, machine-readable format (JSON or CSV) upon request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-critical data (such as your name or date of birth), we may require documentary evidence before making the correction.
• Right to Erasure ("Right to Be Forgotten"): You may request that bzd33 delete your personal data. This right is subject to exceptions — for example, we cannot delete data that we are required to retain by law, or data that is needed to defend a legal claim. Where full deletion is not possible, we will inform you which data must be retained and why.
• Right to Restrict Processing: You may request that bzd33 limit how your data is processed in certain circumstances — for example, while the accuracy of data you have disputed is under review.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You may object to bzd33 processing your data on the basis of legitimate interests — including profiling for personalised promotions — at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bzd33 implements a layered, defence-in-depth approach to data security. We invest continuously in technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, and destruction.

Technical Safeguards:

• Transport Encryption: All data in transit between your browser or mobile app and bzd33 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is issued by a globally trusted Certificate Authority.
• Data-at-Rest Encryption: Sensitive data stored in bzd33's databases — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Password Security: Account passwords are hashed using bcrypt with a high work factor. bzd33 staff cannot read your password in plaintext. If you forget your password, it must be reset — it cannot be retrieved.
• Two-Factor Authentication (2FA): bzd33 supports 2FA via SMS or authenticator app. We strongly recommend enabling 2FA on your account to protect against unauthorised access.
• Intrusion Detection: Our systems are monitored 24/7 by automated intrusion detection tools. Unusual login patterns, high-frequency withdrawal attempts, and IP anomalies trigger automatic alerts and account protections.
• DDoS Protection: The bzd33 platform is protected by enterprise-grade distributed denial-of-service mitigation services to ensure continuous availability and prevent infrastructure attacks from compromising data integrity.

Organisational Safeguards:

• Access to production systems and player data is restricted to authorised bzd33 personnel on a strict need-to-know basis.
• All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Data access logs are reviewed regularly, and access rights are revoked immediately upon staff departure.
• bzd33 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

The bzd33 platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 18. If you are under 18, you must not use bzd33 under any circumstances, and you must not provide any personal information to us.

bzd33 employs age verification checks at registration and may conduct additional KYC verification at any point during a player's use of the platform. If we discover or have reasonable grounds to believe that personal data has been submitted by a person under the age of 18, we will:

• Immediately suspend the associated account pending investigation.
• Delete all personal data collected from the underage individual as promptly as technically possible.
• Permanently close the account and return any deposited funds to the payment method of origin where technically feasible.
• Where required by applicable law, report the incident to the relevant authorities.

If you are a parent or guardian and you believe that your child has registered on bzd33 or provided us with personal information, please contact us immediately at [email protected] with the subject line "Underage Account — Urgent". We will investigate and respond within 24 hours.

bzd33 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, new data processing activities, or improvements to our platform. The updated policy will always be accessible at bzd33.app/privacy-policy.

When we make material changes to this Privacy Policy — meaning changes that substantively affect how we collect, use, or share your personal data — we will notify you by:

• Sending an email notification to your registered email address at least 7 days before the change takes effect; and/or
• Displaying a prominent notice within your bzd33 account dashboard upon your next login.

Minor changes — such as typographical corrections, clarifications that do not alter the substance of the policy, or the addition of new third-party providers performing the same category of service — may be made without advance notice. The "Last Reviewed" date at the top of this page will always reflect the date of the most recent update, whether material or minor.

Your continued use of the bzd33 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should stop using the platform and request account closure by contacting [email protected].

For any questions about this Privacy Policy or about how bzd33 handles your personal data, do not hesitate to reach our team at [email protected]. We are committed to answering privacy queries in plain, clear English and aim to respond to all enquiries within two business hours.