dd33 Privacy Policy

1 Introduction

dd33 ("we", "our", "us") operates the online betting and casino platform accessible at dd33.io (the "Platform"). We are committed to protecting the privacy and security of every player who registers and interacts with our services. This Privacy Policy sets out the types of personal information we collect, the purposes for which it is processed, and the rights available to you as a data subject.

By registering an account, depositing funds, or otherwise using the dd33 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree to any part of this policy, please discontinue use of the Platform and contact us to close your account.

2 Data We Collect

dd33 collects the following categories of personal data from players and prospective players:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Residential address in Bangladesh
• Email address
• Mobile phone number

2.2 Account & Authentication Data

• Username and encrypted password hash
• Account registration date and timestamp
• Security questions and answers (if set by the player)
• Login history including IP addresses and device identifiers

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• bKash, Nagad, Rocket, or Upay mobile wallet account numbers (last four digits only; full numbers are not stored)
• Bank account or card details submitted for KYC verification (processed securely; not stored in plain text)
• Transaction history and account balance records

2.4 Gaming & Betting Activity Data

• Bet placement history, including event, stake amount, odds, and outcome
• Casino game session data, including game title, session duration, wager amounts, and winnings
• Bonus and promotion redemption records
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from it
• Browser type, version, and language settings
• Operating system and device type
• Referring URL and pages visited within the Platform
• Session duration and click-path data

2.6 Communication Data

• Live chat transcripts and support ticket content
• Email correspondence with our support team
• Records of any complaints or disputes submitted

3 How We Collect Data

dd33 collects personal data through the following channels:

• Direct collection: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification and fraud-prevention data provided by KYC service partners; payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners.

4 How We Use Your Data

The personal data dd33 collects is used for the following purposes:

5 Legal Basis for Processing

dd33 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as an account holder — including account creation, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC requirements, and responsible gaming obligations.
• Legitimate interests: Processing carried out to protect the security of the Platform, prevent fraud, and improve our services — balanced against your interests and fundamental rights.
• Consent: Processing for optional communications, such as promotional emails and push notifications, carried out only where you have given explicit consent. You may withdraw this consent at any time by contacting support or updating your account preferences.

6 Sharing Your Data

dd33 does not sell, rent, or trade your personal data. We may share data with the following categories of trusted third parties strictly as needed to operate the Platform:

• Payment processors: bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Dutch-Bangla Bank, and card networks (Visa, Mastercard) — to facilitate deposits and withdrawals.
• Identity verification providers: KYC and anti-fraud service partners who verify the accuracy of identity documents submitted during account registration.
• Game content providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other licensed studios — limited technical session data is shared to power live casino and slot game functionality.
• Analytics providers: Anonymised or aggregated usage data may be shared with analytics partners to help us understand how the Platform is used and where it can be improved.
• Legal and regulatory authorities: We may disclose personal data to law enforcement or regulatory bodies where required by applicable law, court order, or to protect the rights and safety of dd33 and its players.

All third-party partners who process personal data on behalf of dd33 are subject to appropriate data processing agreements and are required to handle your information with the same level of care described in this policy.

7 Cookies & Tracking Technologies

dd33 uses cookies — small text files stored on your device — and similar tracking technologies (web beacons, pixel tags, local storage) to operate the Platform effectively. The types of cookies we use are as follows:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting Platform functionality.
• Preference cookies: Remember your settings, such as language preferences and display options, so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how visitors use the Platform — which pages are visited most, how long sessions last, and where users drop off. This information is used solely to improve the Platform.
• Security cookies: Help detect and prevent fraudulent activity, including identifying unusual login patterns or automated bot behaviour.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies may prevent certain features of the dd33 Platform from working correctly.

8 Data Retention

dd33 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a minimum of five (5) years after account closure, in line with standard financial record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable anti-money laundering regulations.
• Support and communication records: Retained for three (3) years from the date of the last interaction.
• Technical and usage logs: Typically retained for twelve (12) months unless a longer period is required for security or fraud investigation purposes.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.

9 Data Security

dd33 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms to store password credentials.
• Access controls: Personal data is accessible only to dd33 employees and contractors who require it to perform their job functions, and only under strict confidentiality obligations.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns.
• Secure payment handling: Payment credential data is processed via the secure systems of our payment partners and is never stored on dd33's own servers in unencrypted form.

10 Your Rights

As a player on the dd33 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of access: You may request a copy of the personal data dd33 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal and regulatory retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request that your data be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.

We will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11 Children & Minors

dd33 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a person under 21 has provided personal data to us or created an account, we will immediately suspend the account, delete the personal data, and withhold any associated funds pending review.

If you believe that a minor has accessed or registered on the dd33 Platform, please notify us immediately at support@dd33.io so that we can take prompt action.

12 Third-Party Links

The dd33 Platform may contain references to the names of third-party game studios, payment providers, and sports competitions. These references are informational only. dd33 does not embed links to external websites and is not responsible for the privacy practices of any third-party organisations. If you choose to interact with a third-party service independently (such as your bKash or Nagad account), the privacy policy of that service will govern the handling of your data in that context.

13 Policy Updates

dd33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable regulations. When we make material changes, we will notify registered players via the email address on file at least seven (7) days before the changes take effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the dd33 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to the dd33 privacy and support team through the following channels:

• Email: support@dd33.io (plain text — not a clickable link)
• Live Chat: Available 24/7 through the dd33 Platform
• WhatsApp: +880 1XXX-XXXXXX

Our team operates in English and is available around the clock. We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days. dd33 serves players across Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar.