bb33 Privacy Policy
At bb33, your personal data is treated with the same care we give to game security and fair play. This Privacy Policy explains precisely what information we collect, why we collect it, how it is stored and protected, and the rights you hold over your own data as a Player on our platform.
Six Principles That Guide How We Handle Your Data
bb33 is built on trust. These six principles are the foundation of every data decision we make — from the moment you register to the moment you withdraw.
We collect only the data that is genuinely necessary for the stated purpose — whether that is identity verification, processing a bKash withdrawal, or detecting fraud. We do not collect data speculatively.
Your data footprint on bb33 is kept as small as reasonably possible. We ask for only what we need, store it for only as long as required, and delete it securely once the retention period has elapsed.
Your personal information is never sold to third parties, never rented, and never disclosed to advertisers. Access within bb33 is limited to personnel who genuinely need it to deliver or support the service.
All data in transit is protected by TLS 1.3 encryption. Data at rest is encrypted using AES-256. Our infrastructure undergoes regular penetration testing and security audits to guard against unauthorised access.
You have the right to access, correct, export, and request deletion of your personal data at any time. bb33 will action data rights requests within 30 days. No charge is applied for standard requests.
We will always tell you clearly what data we hold, why we hold it, and how long we will keep it. This Privacy Policy is written in plain English — not designed to obscure or confuse. If you have questions, our support team is available 24/7.
1 Who We Are
bb33 operates the online casino and sports betting platform accessible at bb33.vu (the "Platform"). We are an offshore gaming operator serving players across Bangladesh and other permitted jurisdictions. References to "bb33", "we", "us", or "our" in this Privacy Policy refer to the operator of the bb33 Platform.
bb33 acts as the data controller in respect of the personal data collected from Players and visitors to the Platform. This means we determine the purposes for which your personal data is processed and the manner in which it is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under our instruction.
For all privacy-related enquiries, Players may contact us via the support email address published in the footer of this page. Our support team handles data protection queries in English, 24 hours a day, 7 days a week.
2 Data We Collect
2.1 Registration Data
When you create a bb33 account, we collect the following information:
- Full legal name as it appears on your government-issued identity document.
- Date of birth (used to verify that you meet the minimum age requirement of 21 years).
- Email address (used for account communications, security alerts, and promotional messages where opted in).
- Mobile phone number (used for account verification, two-factor authentication, and transaction notifications).
- Residential address (collected at KYC stage for identity verification).
- Username and password (password is stored in hashed, salted form — we never store your plain-text password).
2.2 KYC Verification Documents
To comply with our anti-money-laundering (AML) obligations and to verify that Players meet the age eligibility requirement, we collect identity documents during the KYC process:
- Government-issued photo ID — National Identity Card (NID), passport, or driving licence.
- Proof of address — utility bill, bank statement, or official correspondence dated within three months.
- Payment method verification — screenshot or image confirming ownership of the bKash, Nagad, Rocket, or bank account used for deposits.
2.3 Financial Data
We record transactional data necessary to process deposits, withdrawals, and bonus settlements. This includes:
- Mobile banking numbers (bKash, Nagad, Rocket, Upay) used for transactions — stored in encrypted form.
- Cryptocurrency wallet addresses used for USDT or BTC deposits and withdrawals.
- Transaction amounts, timestamps, reference numbers, and processing status.
- Card BIN data (first six and last four digits of Visa/Mastercard) where card payments are used — full card numbers are never stored on our servers.
2.4 Usage and Technical Data
When you use the Platform, we automatically collect certain technical and behavioural data:
| Data Type | Examples | Purpose |
|---|---|---|
| Device & Browser | Device model, OS version, browser type, screen resolution | Platform optimisation, fraud detection |
| IP Address | IPv4 / IPv6 address at time of login or transaction | Geolocation, security, restricted jurisdiction checks |
| Session Data | Login times, session duration, pages visited, game history | Responsible gaming monitoring, support |
| Betting Activity | Wagers placed, markets selected, odds accepted, outcomes | Account management, dispute resolution, bonus tracking |
| Communication Records | Live chat transcripts, support ticket contents, email threads | Customer service, audit trail |
2.5 Voluntary Data
If you contact us via support chat or email, or participate in surveys or promotions, we may collect additional information you choose to share voluntarily. This data is used solely for the purpose for which it was provided.
3 How We Use Your Data
bb33 uses your personal data for the following purposes:
- Account Creation and Management: To register your account, maintain your profile, verify your identity, and manage your Wallet balance.
- Age and Identity Verification: To confirm that you are at least 21 years of age and that your identity matches the payment methods on file, in accordance with our KYC obligations.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, and Mastercard accurately and securely.
- Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the Platform.
- Responsible Gaming: To monitor session duration, deposit patterns, and betting behaviour to identify Players who may benefit from responsible gaming interventions or self-exclusion tools.
- Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for audit and quality assurance purposes.
- Platform Improvement: To analyse aggregate usage patterns, optimise platform performance, and develop new features that serve our Players better.
- Marketing Communications: To send you promotional offers, bonus notifications, and product updates — only where you have opted in to receive such communications. You may opt out at any time.
- Legal and Regulatory Compliance: To fulfil obligations under applicable law, including responding to valid requests from law enforcement or regulatory authorities.
4 Legal Basis for Processing
Where data protection legislation requires us to identify a legal basis for processing personal data, bb33 relies on the following:
- Contractual Necessity: Processing that is necessary to perform the contract between you and bb33 — including account registration, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML checks, KYC verification, and responses to lawful authority requests.
- Legitimate Interests: Processing for the purposes of fraud prevention, platform security, responsible gaming monitoring, and improving the Platform's services, where those interests are not overridden by your rights and interests.
- Consent: Where we send you direct marketing communications or deploy non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 Sharing Your Data
5.1 What We Share and With Whom
bb33 does not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:
- Payment Processors: We share necessary transactional data with payment service providers (such as bKash, Nagad, and cryptocurrency network infrastructure) strictly to process your deposits and withdrawals.
- Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive a session token or anonymised player identifier to deliver their games. They do not receive your full identity data.
- Identity Verification Services: We may share KYC document data with accredited identity verification service providers to automate and expedite the verification process.
- Fraud Prevention Partners: Aggregated or anonymised risk signals may be shared with fraud detection service providers to protect the platform and all Players from financial crime.
- Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when we are legally required to do so or where we have a good-faith belief that disclosure is necessary to prevent serious harm.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.
5.2 Data Processor Agreements
All third parties who process personal data on bb33's behalf are required to enter into data processing agreements obligating them to process your data only as instructed by bb33, to maintain appropriate security standards, and not to use your data for their own independent purposes.
6 Cookies & Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files placed on your device by a website. bb33 uses cookies and similar tracking technologies (such as local storage and session storage) to enable essential platform functionality, maintain your login session, and understand how the Platform is used.
6.2 Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Maintain your login session, remember your Wallet currency preference, enable secure checkout | No — required for the Platform to function |
| Functional | Remember your language preference, store game settings, restore incomplete sessions | Yes, via browser settings |
| Analytics | Aggregate data on page visits, feature usage, and performance to improve the Platform | Yes, via consent preferences |
| Security | Detect suspicious login behaviour, prevent CSRF attacks, identify bot traffic | No — required for account security |
6.3 Managing Cookies
You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will impair your ability to use the Platform — you may not be able to log in or complete transactions. Instructions for managing cookies are available in your browser's help documentation.
7 Data Retention
bb33 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and registration data | Duration of account + 5 years after closure | AML compliance, dispute resolution |
| KYC documents | 5 years from date of verification | Regulatory obligation |
| Financial transaction records | 5 years from transaction date | AML and financial audit requirements |
| Betting and game activity logs | 3 years from last activity | Dispute resolution, responsible gaming review |
| Support and communication records | 3 years from last interaction | Quality assurance, dispute audit trail |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent |
| Technical and session logs | 90 days | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.
8 Data Security
bb33 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:
- Transport Layer Security: All data transmitted between your device and bb33 servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
- Data Encryption at Rest: Sensitive personal data stored on our servers — including identity documents and payment details — is encrypted using AES-256 encryption.
- Password Security: Passwords are hashed using bcrypt with a high cost factor and individual salt per record. Plain-text passwords are never stored or logged anywhere in our systems.
- Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. When enabled, login requires both a password and a time-based one-time code delivered to the Player's registered mobile number.
- Access Controls: Access to personal data within bb33's internal systems is restricted on a strict need-to-know basis. All staff access is logged and audited regularly.
- Penetration Testing: Our platform and infrastructure are subject to regular security assessments by independent specialists to identify and remediate vulnerabilities proactively.
- Incident Response: In the event of a data breach that poses a risk to Players, bb33 will notify affected individuals promptly and take immediate remediation steps.
9 Your Data Rights
As a Player on the bb33 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via the email address in the footer of this page.
- Right of Access: You may request a copy of all personal data that bb33 holds about you. We will provide this within 30 days of a valid request, free of charge for standard requests.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where we have no overriding legitimate interest or legal obligation to retain it.
- Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
- Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a machine-readable copy of your data for transfer to another service provider.
- Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, and we will cease unless we can demonstrate compelling grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
10 International Data Transfers
bb33 operates as an offshore platform and its infrastructure, including data storage and processing servers, may be located in jurisdictions outside Bangladesh. When your personal data is transferred internationally, bb33 ensures that appropriate safeguards are in place to maintain the same level of protection described in this Privacy Policy.
Safeguards used for international transfers may include:
- Data processing agreements incorporating internationally recognised standard contractual clauses.
- Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
- Technical and organisational security measures equivalent to those applied to locally held data.
By using the bb33 Platform and providing your personal data, you acknowledge that your data may be transferred to and processed in jurisdictions other than Bangladesh, and you consent to such transfers subject to the safeguards described above.
11 Children's Privacy
The bb33 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. The minimum age requirement is enforced through our mandatory KYC verification process, which requires all Players to provide a valid government-issued photo ID confirming their date of birth.
If bb33 becomes aware that a person under the age of 21 has registered an account or provided personal data, we will immediately suspend the account, delete the associated data, and forfeit any balances in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that a minor in your care has provided personal data to bb33, please contact our support team immediately so that we can take appropriate action.
12 Changes to This Privacy Policy
bb33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered Players by email and/or by displaying a prominent notice on the Platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
Older versions of this Privacy Policy are retained in our internal archive. If you require a copy of a prior version for reference, you may request it through our support team.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way bb33 handles your personal data, please do not hesitate to get in touch. Our data protection team will respond to all enquiries within 30 days.
You may reach us at the support email address displayed in the footer of this page. When submitting a data rights request, please include your registered username and a brief description of your request to help us process it as quickly as possible.
For responsible gaming concerns or to request self-exclusion, please visit our dedicated Responsible Gaming page, where you will find information on the tools and support resources available to you.
All privacy communications are handled in English. Support is available 24 hours a day, 7 days a week.
Explore bb33's Full Game Library
Now that you know how we protect your data, discover why over 50,000 players across Bangladesh trust bb33 for cricket betting, live casino, slots, and more.