Privacy Policy — How bhd33 Handles Your Personal Data

01 Introduction

bhd33 (hereinafter "bhd33", "we", "us", or "our") is the operator of the online gaming and sports betting platform available at bhd33.io. We are committed to protecting the personal data of every player who registers and uses our platform. This Privacy Policy (hereinafter "Policy") sets out in clear and accessible terms how bhd33 collects, uses, stores, shares, and protects your personal information in connection with your use of the bhd33 platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and bhd33. Where any conflict exists between this Policy and the Terms & Conditions in relation to data processing matters, this Policy shall prevail.

This Policy is written in English and is effective as of 1 January 2026. bhd33 reserves the right to update this Policy from time to time in accordance with Section 12 below.

02 Data We Collect

bhd33 collects personal data that you provide directly to us, data generated automatically by your use of the platform, and in certain cases, data received from trusted third-party partners. The categories of personal data we collect include but are not limited to the following:

2.1 Identity and Verification Data

When you register a bhd33 account and complete our mandatory Know Your Customer (KYC) verification process, we collect: your full legal name as it appears on your government-issued identity document; your date of birth; your National Identity Card (NID) number or passport number; a copy of your identity document photograph; and, where required for enhanced verification, a selfie photograph for biometric comparison purposes.

2.2 Contact and Communication Data

We collect your registered mobile number (used for OTP authentication and account notifications), your email address, your city or district of residence within Bangladesh, and records of any communications you initiate with our support team via email or live chat.

2.3 Financial and Transaction Data

bhd33 collects references to the payment methods you use to deposit and withdraw funds, including bKash wallet identifiers, Nagad account references, Rocket mobile banking references, Upay identifiers, Dutch-Bangla Bank account references, BRAC Bank account references, and Visa or Mastercard card references (partial card numbers only; bhd33 does not store full card numbers). We also maintain a complete transactional history of all deposits, withdrawals, bonus credits, and wager settlements associated with your account.

2.4 Technical and Device Data

When you access the bhd33 platform, our systems automatically collect technical data including: your IP address at the time of access; device type and model; operating system and version; browser type and version; screen resolution; and session timestamps indicating login and logout times.

2.5 Behavioural and Usage Data

We record your in-platform activity including the games you play, bets you place, betting markets you browse, session durations, in-game events, and responsible gaming tool usage. This data is used to personalise your experience, monitor for problem gambling indicators, and detect fraudulent or collusive behaviour.

03 How We Collect Your Data

bhd33 collects your personal data through the following primary means:

• Direct submission: Data you provide during account registration, KYC document upload, deposit/withdrawal requests, and communications with our support team;
• Automated collection: Technical and usage data collected automatically via server logs, session tracking, and platform analytics when you interact with bhd33.io;
• Third-party sources: Identity verification data returned by our KYC service provider following document verification; fraud-risk scores provided by payment security partners; and game result data transmitted by our certified game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi);
• Cookies and similar technologies: Session cookies and persistent cookies that maintain your logged-in state and store platform preferences. See Section 9 for full details on our cookie practices.

04 How We Use Your Personal Data

bhd33 uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent:

• Account management: Creating, maintaining, and administering your bhd33 player account, including authentication and access control;
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with applicable KYC obligations;
• Payment processing: Processing your deposit and withdrawal requests via your chosen payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank);
• Platform operation: Delivering the games, betting markets, live casino services, and all other features of the bhd33 platform to you;
• Fraud prevention and security: Detecting and investigating suspicious account activity, fraudulent transactions, collusive play patterns, and potential money laundering;
• Responsible gaming: Monitoring your gaming behaviour for indicators of problem gambling and facilitating the use of responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion;
• Customer support: Responding to your queries, complaints, and account-related requests in a timely and effective manner;
• Legal compliance: Fulfilling our obligations under applicable laws and regulations, including responding to lawful requests from competent authorities;
• Marketing communications (with consent): Sending you promotional offers, bonus notifications, and platform news where you have opted in to receive such communications. You may opt out at any time.

05 Data Sharing and Disclosure

bhd33 may share your personal data with the following categories of third parties under strictly controlled conditions:

5.1 Payment Service Providers

To process your deposit and withdrawal transactions, bhd33 shares relevant financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and international card processors. Each payment partner is contractually bound to use your data solely for the purpose of processing the relevant transaction and to comply with applicable data protection standards.

5.2 KYC and Identity Verification Partners

bhd33 uses a certified third-party KYC verification service provider to validate identity documents and confirm player eligibility. Your identity document data and verification photographs are transmitted to this provider under a data processing agreement that prohibits any secondary use of the data.

5.3 Game Studio Partners

Our certified game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) receive a pseudonymous player identifier and session token to facilitate your access to their games. These partners do not receive your full name, NID details, or payment information.

5.4 Legal and Regulatory Disclosure

bhd33 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities in response to lawful requests, court orders, or where disclosure is necessary to protect the legal rights of bhd33 or to prevent fraud or criminal activity. In all such cases, bhd33 will disclose only the minimum data necessary to satisfy the lawful request.

06 Data Security

The security measures implemented by bhd33 include the following:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the bhd33 platform is encrypted using 256-bit SSL/TLS encryption. The bhd33.io domain operates exclusively over HTTPS;
• Password Hashing: Account passwords are never stored in plain text. bhd33 uses industry-standard one-way cryptographic hashing algorithms to store password credentials securely;
• OTP Authentication: High-risk account actions including withdrawals and email/mobile number changes require one-time password (OTP) confirmation delivered to your registered mobile number;
• Access Controls: Access to production systems containing player data is restricted to authorised bhd33 personnel on a strict need-to-know basis. All internal access is logged and audited;
• PCI-DSS Compliance: Card payment data is handled exclusively by PCI-DSS compliant payment processors. bhd33 does not store, process, or transmit full card numbers on its own infrastructure;
• Data Minimisation: bhd33 collects only the minimum personal data required for each specific purpose. Data fields not necessary for a given function are not collected.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bhd33 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

07 Data Retention

bhd33 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your registered account with bhd33;
• Post-closure account data: Following account closure — whether initiated by you or by bhd33 — identity, transaction, and KYC records are retained for a minimum of 5 years to comply with applicable anti-money laundering and record-keeping obligations;
• Marketing preference data: Retained until you withdraw your consent to marketing communications or request deletion, subject to the 5-year minimum where any transactional relationship has existed;
• Technical and session logs: Retained for a rolling period of 12 months for platform security and fraud investigation purposes;
• Support communications: Retained for 3 years from the date of the relevant communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

08 Your Data Rights

As a player on the bhd33 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. bhd33 will respond to all valid data rights requests within 30 calendar days of receipt:

• Right of Access: You have the right to request a copy of the personal data that bhd33 holds about you, along with information about how that data is being used;
• Right of Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right of Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations;
• Right to Restrict Processing: You have the right to request that bhd33 suspend the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved;
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of personal data you have provided to bhd33 and to request that this data be transmitted to another service provider where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bhd33's legitimate interest, including objecting to direct marketing communications;
• Right to Withdraw Consent: Where bhd33 relies on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

09 Cookies and Tracking Technologies

The bhd33 platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, and collect analytical data about platform usage. The following categories of cookies are in use on bhd33.io:

• Essential Cookies: These cookies are strictly necessary to enable core platform functions including login session management, navigation, and security token validation. The platform cannot function correctly without these cookies and they cannot be disabled;
• Functional Cookies: These cookies remember your preferences such as language settings, game lobby filters, and responsible gaming tool configurations. Disabling these cookies will not prevent platform access but may reduce personalisation;
• Analytical Cookies: bhd33 uses anonymised analytical data to understand how players navigate the platform, identify performance issues, and improve the overall user experience. Analytical data is aggregated and does not identify individual players;
• Security Cookies: Short-lived cookies used to detect and mitigate cross-site request forgery (CSRF) and other session-based security threats.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use the bhd33 platform. Clearing all cookies will log you out of any active session.

10 Children's Privacy

If bhd33 becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and reverse any financial transactions where possible. If you believe that a minor has registered on the bhd33 platform, please report this immediately to [email protected].

bhd33 uses age verification as part of the mandatory KYC process precisely to prevent access by individuals below the minimum age threshold. Players who provide false date of birth information to circumvent this check are in material breach of our Terms & Conditions.

11 Third-Party Links and Services

The bhd33 platform may contain references to third-party game studios and payment partners in an informational context. bhd33 is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies exclusively to data collected by bhd33 through the bhd33.io platform. Players who access external services — such as their bKash or Nagad application to complete a payment — should review the privacy policies of those respective services independently.

12 Amendments to This Policy

bhd33 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party data recipient — bhd33 will provide registered players with advance notice via the email address associated with their account or via an on-platform notification prior to the change taking effect.

The effective date at the top of this document will be updated each time a revised version is published. Your continued use of the bhd33 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you may close your account in accordance with the procedure set out in our Terms & Conditions.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bhd33 processes your personal data, please contact our data support team using the details below:

• Email: [email protected] (plain text — this address is not a clickable link)
• Response Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Expected Response Time: Within 30 calendar days for formal data rights requests; within 48 hours for general privacy enquiries