Privacy Policy — How bb333 Collects, Uses, and Protects Your Data

1 Introduction

bb333 is Bangladesh's trusted online betting and casino platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of the country. We understand that when you share personal information with us — whether during registration, payment, or routine use of our platform — you are placing a significant degree of trust in us. We take that trust seriously.

This Policy sets out, in clear and practical terms, the types of personal data we collect, the purposes for which we use it, the parties with whom we may share it, and the measures we take to protect it. It also explains the rights you hold over your own personal information and how to exercise those rights. This Policy should be read in conjunction with our Terms & Conditions, which also form part of the agreement between you and bb333.

2 Data We Collect

bb333 collects personal data in two broad categories: information you provide to us directly, and information collected automatically through your use of the platform.

2.1 Information You Provide Directly

• Identity Data: Full legal name, date of birth, gender, and a copy of your Bangladesh National ID (NID) card or passport submitted for KYC verification.
• Contact Data: Mobile phone number (used as your primary account identifier and for OTP authentication), email address, and residential district or city within Bangladesh.
• Financial Data: Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay; bank account details for Dutch-Bangla Bank, City Bank, or BRAC Bank transfers. We store only the identifiers needed to process transactions — full card or bank account numbers beyond what is required for routing are never stored in plain text.
• Account Credentials: Your chosen username and a hashed (non-reversible) version of your password. bb333 staff cannot view your password in plain text at any point.
• Support Communications: The content of live chat conversations, email correspondence, and any attachments submitted to our support team.
• Responsible Gaming Preferences: Any deposit limits, session time reminders, cool-off period settings, or self-exclusion requests you configure within your account.

2.2 Information Collected Automatically

• Device and Technical Data: IP address, browser type and version, device type (mobile, tablet, desktop), operating system, screen resolution, and time zone setting.
• Usage Data: Pages visited, game sessions started, bets placed, time spent on each section of the platform, and clickstream data recorded during your browsing session.
• Transaction Logs: A complete record of all deposits, withdrawals, bonus activations, wagering activity, and balance changes associated with your account, including timestamps in Bangladesh Standard Time (BST, UTC+6).
• Cookies and Similar Technologies: Session cookies, persistent cookies, and local storage tokens used to maintain your login session, remember preferences, and collect anonymised analytics. See Section 7 for full cookie details.

3 How We Collect Your Data

bb333 collects personal data through the following channels and mechanisms:

• Direct Input: Information you type into registration forms, KYC submission pages, deposit/withdrawal forms, and support chat windows.
• Automated Technologies: Cookies, web beacons, server-side logging, and browser fingerprinting used to collect technical and usage data each time you access the platform.
• Payment Processors: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal. bb333 receives confirmation status and a masked reference identifier — raw payment credentials are processed by the payment provider, not bb333's servers.
• Third-Party Game Providers: Game session outcome data (win/loss amounts, round durations, RTP logs) may be provided to bb333 by game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Habanero for the purpose of dispute resolution and responsible gaming monitoring.
• Identity Verification Services: Where bb333 uses a third-party KYC partner to assist in verifying the authenticity of NID documents, that partner processes submitted images solely for verification purposes under a data processing agreement with bb333.

4 How We Use Your Data

bb333 uses your personal data only for specific, legitimate, and documented purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected.

4.1 Core Service Delivery

• Creating, maintaining, and authenticating your bb333 account
• Processing deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer)
• Crediting and managing bonus funds, free spins, and promotional rewards
• Settling bets and recording all wagering activity across sports betting, live casino, slots, and fishing games
• Providing 24/7 customer support via live chat and email

4.2 Legal and Regulatory Compliance

• Verifying player age (21+) and identity through KYC document review
• Meeting anti-money laundering (AML) and counter-terrorism financing obligations through transaction monitoring
• Maintaining complete transaction records for the legally required retention period
• Responding to lawful requests from competent authorities where required

4.3 Responsible Gaming

• Monitoring player behaviour patterns to identify signs of problem gambling
• Enforcing deposit limits, session time reminders, cool-off periods, and self-exclusion settings configured by the player
• Proactively reaching out to players who exhibit elevated-risk behavioural indicators

4.4 Platform Improvement and Security

• Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience
• Detecting and preventing fraud, account takeovers, bonus abuse, and suspicious betting patterns
• Investigating and resolving player disputes and complaints
• Conducting system security audits and penetration testing

4.5 Marketing Communications

With your explicit consent, bb333 may send you personalised promotional communications about new games, seasonal offers (such as Pohela Boishakh bonuses, Eid promotions, or BPL tournament specials), and deposit match offers via SMS or email. You may withdraw consent at any time by contacting support via live chat or by adjusting your account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Legal Basis for Processing

bb333 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil the agreement between you and bb333 — including account management, payment processing, and bet settlement — is necessary to perform our contract with you.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and record retention — are required by applicable law and regulations.
• Legitimate Interests: bb333 processes certain data (such as fraud detection signals, security logs, and anonymised analytics) on the basis of our legitimate interest in operating a secure and sustainable platform, provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent — including marketing communications and non-essential cookies — you may withdraw your consent at any time without affecting prior processing.

6 Data Sharing and Disclosure

bb333 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Payment Processing Partners

To process your deposits and withdrawals, bb333 shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). These providers act as independent data controllers for their own platforms and are subject to their own privacy policies and regulatory obligations.

6.2 Game Content Providers

bb333's platform integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Habanero. A session token and anonymised player identifier are passed to game providers when you launch a game. These providers do not receive your full name, contact details, or financial information.

6.3 KYC and Identity Verification

Where bb333 uses a third-party identity verification service to assist with NID document review, that partner receives only the document images and data required for the verification check. All such partners operate under a formal data processing agreement with bb333 and are contractually prohibited from using your data for any purpose beyond the verification task.

6.4 Legal and Regulatory Authorities

bb333 may disclose your personal data to relevant regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to prevent or investigate suspected criminal activity, fraud, or money laundering. We will not disclose data beyond what is legally required in such circumstances.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of bb333's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via a notice on the platform and/or by email, and your rights under this Policy will continue to apply.

7 Cookies and Tracking Technologies

bb333 uses cookies and similar client-side storage technologies to operate core platform functionality and to understand how players use our services. The following categories of cookies are used on the bb333 platform:

7.1 Essential Cookies

These cookies are strictly necessary for the platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during an active session, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that route your requests to the correct server.

7.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred game view, notification settings, and responsible gaming limit configurations — so that they persist across sessions. These cookies improve your experience but are not essential to core platform operation. You may disable them via your browser settings, though some preferences may not be saved between sessions.

7.3 Analytics Cookies

bb333 uses anonymised analytics data to understand aggregate platform usage patterns — for example, which game categories are most popular among players in Dhaka versus Chittagong, or at what point in the registration funnel players encounter friction. Analytics data is processed in aggregate form and is not linked back to your personal identity. You may opt out of analytics cookies at any time through your account settings.

7.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in and using the platform. The following links provide browser-specific cookie management instructions for the most commonly used browsers: Chrome, Firefox, Safari, and Edge (refer to each browser's official help documentation for current instructions).

8 Data Security

bb333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

8.1 Technical Safeguards

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial identifiers
• Bcrypt hashing with salt for all stored account passwords — plain-text passwords are never stored
• OTP-based two-factor authentication for account login and withdrawal confirmations
• Web application firewall (WAF) and DDoS mitigation systems
• Automated intrusion detection and real-time alerting for anomalous access patterns
• Regular third-party penetration testing and vulnerability assessments

8.2 Organisational Safeguards

• Role-based access controls — bb333 staff can only access player data to the extent their role requires it
• Mandatory data privacy training for all staff who handle personal information
• Formal data processing agreements with all third-party vendors who handle player data on our behalf
• Incident response plan for data breaches, including player notification procedures

8.3 Your Role in Security

While bb333 takes every reasonable measure to protect your data, you also play a critical role in account security. You must keep your password and OTP codes confidential, never share your login credentials with a third party, log out of your account when using shared devices, and contact our support team immediately if you suspect unauthorised access to your account.

9 Data Retention

bb333 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal obligations. The following retention periods apply:

After the applicable retention period has elapsed, your personal data will be securely deleted or irreversibly anonymised so that it can no longer be linked back to you as an individual.

10 Your Privacy Rights

As a bb333 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat from your account dashboard, or by email at [email protected] (plain text — not a clickable link).

• Right of Access: You may request a copy of all personal data bb333 holds about you. We will provide this in a commonly used, machine-readable format within a reasonable timeframe.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, documentary evidence of the correct information may be required.
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe processing is unlawful. Note that certain data must be retained to satisfy our legal obligations and cannot be deleted on request during the mandatory retention period.
• Right to Restrict Processing: You may request that bb333 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection is under consideration.
• Right to Data Portability: You may request a structured, commonly used export of the personal data you have provided to bb333, in order to transmit it to another service provider.
• Right to Object: You may object to processing carried out on the basis of bb333's legitimate interests, or to the use of your data for direct marketing purposes. Marketing opt-out requests take effect immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11 Children and Minors

The bb333 platform is strictly intended for adults aged 21 years and above. bb333 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under 21, that account will be immediately suspended, all activity will be reviewed, and any funds on the account will be handled in accordance with our Terms & Conditions and applicable law.

bb333 supports parental control tools and age-verification safeguards. We partner with responsible gaming organisations to promote awareness of underage gambling risks. If you are a parent or guardian and believe a minor in your care has accessed the bb333 platform, please contact us immediately at [email protected].

12 Third-Party Links

The bb333 platform may contain references or contextual mentions of third-party services — such as payment providers (bKash, Nagad) or game studios (Pragmatic Play, Evolution Gaming) — but our platform does not embed clickable links to external websites outside the bb333 ecosystem. Should you independently navigate to any external website, bb333 has no control over that website's content, privacy practices, or data collection activities, and accepts no responsibility for them.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your bb333 account — particularly the privacy policies of your chosen mobile banking provider (bKash, Nagad, Rocket, or Upay) and any bank you use for transactions.

13 Policy Updates

bb333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify you by posting a prominent notice on the bb333 platform and, where we hold your email address or mobile number, by sending a direct notification at least 7 days before the changes take effect.

The updated Policy will display a revised "Last updated" date at the top of this page. Your continued use of the bb333 platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must cease using the platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically — at minimum whenever you receive a notification of an update — to stay informed about how bb333 is protecting your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bb333 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly from your bb333 account dashboard — this is the fastest way to reach our support team.
• Email: [email protected] (plain text — not a clickable link). Our team aims to respond to all email enquiries within 24 hours during regular business days (Bangladesh Standard Time, UTC+6).

When submitting a privacy-related request, please include your registered mobile number or username so that our team can locate your account and handle your request efficiently. For security purposes, we may ask you to verify your identity before fulfilling certain requests, such as data access or erasure.

bb333 is committed to resolving all privacy concerns promptly, transparently, and fairly. Your privacy matters to us — and we will always treat your personal information with the care and respect it deserves.