33ck Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by 33ck ("we", "us", "our", or "the Platform") and applies to all individuals who access, register with, or otherwise interact with the 33ck website at https://33ck.io and its associated services ("the Service").

33ck is an online casino and sports betting platform serving players in Bangladesh and internationally. As part of delivering our Service, we necessarily collect and process certain personal data relating to our players. We take this responsibility seriously and are committed to handling your personal information with the highest standards of care, security, and transparency.

This Policy explains what personal data we collect from you, the purposes and legal bases on which we process it, how long we retain it, with whom we share it, and what rights you hold as a data subject. Please read this Policy carefully before registering an account or using the 33ck platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are published on this website.

2 Data We Collect

We collect personal data from you through several channels, including directly from you during registration and account management, automatically through your use of the platform, and in some cases from third-party partners who assist in delivering our services. The categories of data we collect are detailed below.

2.1 Registration & Account Data

When you create a 33ck account, we collect the following information:

• Full legal name
• Date of birth
• Residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify that players meet the minimum age requirement of 21 years, we may request:

• A copy of a government-issued photo ID (national ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• In some cases, a selfie photograph alongside the presented ID document for liveness verification

2.3 Financial & Transaction Data

When you make deposits or withdrawals through payment methods such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect and retain records of:

• Transaction amounts in BDT
• Payment method type and masked account or card identifiers
• Transaction timestamps and reference numbers
• Deposit and withdrawal history linked to your account

33ck does not store full card numbers or mobile banking PINs. Payment processing is handled by certified third-party payment processors who operate under their own security standards.

2.4 Usage & Behavioural Data

As you use the 33ck platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features accessed, and time spent on the platform
• Game sessions, bet history, wager amounts, and game outcomes
• Session login and logout timestamps (Bangladesh Standard Time, UTC+6)
• Clickstream data and navigation paths

2.5 Communications Data

If you contact our customer support team or communicate with us via any channel, we retain records of:

• The content of your messages and our responses
• Ticket reference numbers and resolution timestamps
• Email correspondence sent to or received from your registered address

3 How We Use Your Data

The personal data we collect is used for specific, clearly defined purposes. We do not use your data for any purpose incompatible with the reasons it was originally collected. The primary purposes for which we process your data are as follows:

Where we process your data for responsible gaming monitoring purposes, this includes automated analysis of betting patterns that may indicate problematic gambling behaviour. If such patterns are detected, our team may proactively reach out to you with information about the self-management tools available on the platform.

4 Legal Basis for Processing

Every data processing activity carried out by 33ck is grounded in one or more of the following lawful bases:

• Contract performance: Processing is necessary to provide the services you have contracted with us to receive, including account management, gameplay, and payment processing.
• Legal obligation: We are required to collect and retain certain data — particularly identity verification documents and financial records — to comply with anti-money laundering obligations, age verification requirements, and other applicable laws.
• Legitimate interests: We process certain data (such as usage analytics and fraud detection signals) based on our legitimate interest in operating a secure, fair, and commercially viable platform, where such interests are not overridden by your rights and freedoms.
• Consent: Where you have given us specific consent — for example, to receive promotional emails — we process your data on that basis. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Data

33ck does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with applicable data protection standards.

5.1 Payment Processors

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, we share the minimum necessary transaction data with our certified payment processing partners. These partners process data solely for the purpose of completing your requested transactions.

5.2 Game Providers

Games on the 33ck platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, a session token and anonymised player identifier are shared with the relevant game provider's systems. We do not share your name, email, or financial details with game providers.

5.3 Identity Verification Services

Where KYC verification is carried out with the assistance of a third-party identity verification provider, your submitted documents and biometric data (if applicable) are shared with that provider solely for the purpose of completing the verification check. Such providers are bound by strict data processing agreements.

5.4 Legal and Regulatory Authorities

We may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts if we receive a lawful request, court order, or are otherwise obligated to do so under applicable law. We will notify you of such disclosures where we are legally permitted to do so.

5.5 Business Transfers

In the event that 33ck undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you prior to any such transfer and will ensure that the receiving party maintains data protection standards equivalent to those described in this Policy.

6 Cookies & Tracking

33ck uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website server. Cookies allow the platform to recognise your device between visits, maintain your session, and record certain preferences.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences such as your selected language, display settings, and responsible gaming tool configurations.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the platform, enabling us to identify areas for improvement. Analytics data is aggregated and does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF tokens and device fingerprinting signals used to identify unusual login patterns.

6.2 Managing Cookies

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will impair your ability to log in and use the 33ck platform. Detailed guidance on managing cookies is available through your browser's help documentation.

33ck does not use third-party advertising cookies or pixel trackers from social media platforms on the main platform pages.

7 Data Security

33ck implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption on all data transmitted between your device and our servers.
• Industry-standard one-way cryptographic hashing (bcrypt or equivalent) for all stored account passwords. Plaintext passwords are never stored.
• Restricted access controls — only authorised 33ck personnel with a demonstrable need to access specific data categories may do so.
• Regular internal security reviews and vulnerability assessments of platform infrastructure.
• Firewalls, intrusion detection systems, and rate-limiting measures on all externally facing endpoints.
• Secure, encrypted storage for KYC documents with access logging and audit trails.

While 33ck takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a significant risk to your rights and freedoms, we will notify you as required by applicable data protection standards and take immediate remediation steps.

8 Data Retention

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory obligations that require longer retention periods.

Following the expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Data subject to an active legal hold, regulatory investigation, or dispute resolution process will be retained for the duration of that process regardless of the standard retention period.

9 Your Rights

As a data subject, you hold a number of rights with respect to the personal data that 33ck holds about you. These rights are outlined below. To exercise any of these rights, please contact our support team at [email protected] with your registered username and a clear description of your request.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that override this right.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or a contractual obligation, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

We aim to respond to all data rights requests within 30 calendar days of receipt. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it. All communications regarding data rights requests are handled in English.

10 Children & Minors

The 33ck platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. Our registration process includes age declaration requirements, and we may request documentary proof of age at any time.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete all personal data relating to that individual, and take steps to ensure that any funds deposited are handled appropriately in accordance with our Terms and Conditions.

If you believe that a minor is using or has registered an account on the 33ck platform, please contact us immediately at [email protected]. We take underage access extremely seriously and will act promptly on any credible report.

11 International Transfers

33ck serves players primarily in Bangladesh. However, some of our service providers — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment processing and cloud infrastructure partners — may be located in or process data from jurisdictions outside Bangladesh.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place. These safeguards may include contractual clauses that impose data protection obligations on the recipient equivalent to those described in this Policy, or reliance on adequacy determinations where applicable.

By using the 33ck platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh where data protection laws may differ. We take all reasonable steps to ensure that any international transfer of your data is handled with the same level of care as data processed domestically.

12 Third-Party Links

The 33ck website may contain references to third-party game providers and payment partners. While we strive to ensure that all content on our platform meets our quality and integrity standards, we are not responsible for the privacy practices of third-party organisations.

When you interact with third-party game content embedded within the 33ck platform, the relevant game provider's own privacy policy will govern the processing of any data collected directly by their systems. We encourage you to review the privacy policies of any third-party services you interact with.

13 Changes to This Policy

33ck reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes — meaning changes that significantly affect your privacy rights or the way we handle your data — we will notify you at least 14 days in advance by email to your registered address, or by displaying a prominent notice on the platform.

Non-material changes (such as typographical corrections, clarifications of existing provisions, or minor operational adjustments) may be made without advance notice. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Your continued use of the 33ck platform following the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the platform and may request account closure in accordance with our Terms and Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 33ck handles your personal data, please contact our support team using the details below. All privacy-related communications are handled in English by our dedicated support staff, available 24 hours a day, 7 days a week.

For general account support, deposit and withdrawal queries, and technical assistance:

[email protected]

For business enquiries, data processing agreements, and partnership matters:

[email protected]

When submitting a privacy-related request, please include your registered username, a clear description of your request or concern, and — where applicable — the specific right you wish to exercise. This will allow us to identify your account and respond to your request as efficiently as possible.

We aim to acknowledge all privacy-related communications within 2 business days and to provide a substantive response within 30 calendar days of receipt. Bangladesh Standard Time (BST, UTC+6) is used as our operational time reference for all response timelines.