33ok Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 33ok ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the User") who register for or otherwise access services available at 33ok.io. It applies to all users of the 33ok platform, including players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh.

By creating a 33ok account or using any of our services — including sports betting, live casino, slots, card games such as Callbreak Quick, the Wheel game, and all associated payment services — you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the broader agreement between you and 33ok. In the event of any conflict between this Policy and those documents on a data-specific matter, this Policy shall prevail.

2 Data We Collect

2.1 Registration Data

When you create a 33ok account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, mobile phone number, and any username or display name you choose. This information is necessary to establish and maintain your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering (AML) and know-your-customer (KYC) obligations, we may request and retain copies of identity documents including your National Identity Card (NID), passport, or driver's licence. We may also request proof of ownership of the payment method(s) you use to deposit or withdraw funds.

2.3 Financial Transaction Data

We collect records of all deposits and withdrawals made through your 33ok account, including transaction amounts (in Bangladeshi Taka ৳), timestamps, transaction reference numbers, and the payment channels used (bKash, Nagad, Rocket, Upay, Visa, Mastercard). We do not store complete card numbers — only masked references necessary for transaction reconciliation.

2.4 Platform Usage Data

We collect data about how you use the 33ok platform, including the games you play, bets you place, session durations, page views, feature interactions, and in-platform communications with our support team. This data is used to improve our services, personalise your experience, and monitor for responsible gaming indicators.

2.5 Technical & Device Data

When you access 33ok, our servers automatically record certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and access timestamps. This data helps us maintain platform security, diagnose technical issues, and detect fraudulent access patterns.

3 How We Use Your Data

33ok uses your personal data only for the specific purposes set out below. We do not use your data in ways that are incompatible with these stated purposes without first obtaining your separate consent.

• Account Management: To create, operate, and maintain your 33ok account, including processing login requests, managing account settings, and communicating account-related updates.
• Payment Processing: To facilitate deposits and withdrawals through your chosen payment method, to reconcile transactions, and to investigate and resolve any payment disputes.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years, and to fulfil our KYC obligations in accordance with applicable anti-money-laundering standards.
• Service Improvement: To analyse aggregated platform usage patterns, identify technical issues, develop new features, and improve the overall user experience on 33ok.
• Personalisation: To tailor game recommendations, promotional offers, and interface preferences to your demonstrated interests, where you have not opted out of personalisation.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling behaviour, to enforce deposit limits or self-exclusion requests, and to send responsible gaming reminders where appropriate.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other illegal or prohibited conduct on the platform.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities, including the retention of financial records for prescribed periods.
• Marketing Communications: To send promotional offers, bonus notifications, and platform news to users who have explicitly opted in to receive such communications. You may opt out at any time.

4 Legal Basis for Processing

Every instance of personal data processing at 33ok is grounded in one of the following recognised legal bases:

• Contractual Necessity: Processing required to deliver the services you have registered for, including account management, payment processing, and customer support.
• Legal Obligation: Processing necessary for 33ok to comply with applicable legal requirements, including KYC identity checks, AML transaction monitoring, and mandatory financial record-keeping.
• Legitimate Interests: Processing carried out in pursuit of 33ok's legitimate operational interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing

5.1 We Do Not Sell Your Data

33ok does not sell, rent, or otherwise commercially transfer your personal data to third parties. Your data is shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.2 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each payment provider operates under its own privacy policy and data protection obligations. 33ok is not responsible for the data practices of third-party payment providers.

5.3 Identity Verification Partners

Where we use third-party KYC service providers to assist with identity verification, the documents and data you submit for verification may be shared with those providers. All KYC partners are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than identity verification.

5.4 Technology & Infrastructure Providers

33ok uses reputable third-party cloud infrastructure, database, and analytics providers to operate the platform. These providers may process personal data on our behalf as data processors and are contractually obligated to handle your data only under our documented instructions and in accordance with applicable data protection standards.

5.5 Game Content Providers

Certain game titles on the 33ok platform are operated by certified third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Aggregate and anonymised usage data (such as session counts and game popularity metrics) may be shared with these providers for licensing and technical support purposes. Individual player data is not shared with game providers without your explicit consent.

5.6 Legal & Regulatory Authorities

33ok may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. We will notify you of such disclosures where we are legally permitted to do so.

6 International Data Transfers

Some of 33ok's technology infrastructure and third-party service providers are located outside Bangladesh. Where your personal data is transferred to a jurisdiction that does not offer the same level of data protection as Bangladesh, 33ok takes appropriate measures to ensure that your data remains protected to an equivalent standard. These measures may include contractual data transfer agreements, data processing agreements with standard protective clauses, or reliance on providers certified under recognised international security frameworks.

By using the 33ok platform, you acknowledge and consent to the transfer of your personal data to such jurisdictions for the purposes described in this Policy, subject at all times to the safeguards described above.

7 Data Retention

33ok retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with 33ok, plus a further period of up to 5 years following account closure to comply with financial record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, in accordance with AML regulatory requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction to comply with financial reporting and anti-money-laundering obligations.
• Marketing Consent Records: Retained for as long as you remain subscribed to 33ok marketing communications, plus a reasonable period thereafter to evidence that consent was properly obtained.
• Technical Logs: Retained for up to 12 months for security and diagnostic purposes, after which they are aggregated and anonymised or permanently deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. If you request early deletion of your data, we will comply to the extent permitted by our legal obligations — see Section 10 for details of your rights.

8 Security Measures

33ok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive personal data stored on 33ok servers is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only.
• Access Controls: Internal access to personal data is governed by a strict role-based access control policy. Only staff who require access to specific data categories for their job function are granted access, and all access events are logged.
• Regular Security Audits: 33ok conducts periodic security assessments and penetration tests to identify and remediate potential vulnerabilities in our platform and infrastructure.
• Fraud Detection Systems: Automated monitoring systems operate continuously to detect suspicious login activity, unusual transaction patterns, and other indicators of account compromise or fraudulent behaviour.

While 33ok takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for promptly notifying us of any suspected unauthorised access to your account.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, remember your preferences, and provide analytical data to the website operator. 33ok uses cookies and similar tracking technologies (such as local storage and session tokens) to deliver a functional, secure, and personalised platform experience.

9.2 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. Essential cookies cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymised data about how users interact with the platform — such as which pages are visited most frequently and where errors occur. This data helps us improve platform performance and user experience.
• Preference Cookies: Remember your platform settings and preferences (such as language or display settings) so that you do not need to re-enter them on each visit.
• Analytics Cookies: Used to track aggregate user behaviour patterns and measure the effectiveness of platform features and promotions. Analytics data is processed in anonymised or pseudonymised form.

9.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may impair the functionality of certain 33ok platform features. Blocking essential cookies will prevent you from logging in or using core services.

10 Your Rights

As a user of the 33ok platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at the details provided in Section 13. We will respond to all valid requests within a reasonable period and in any event within 30 days of receipt.

• Right of Access: You may request a copy of the personal data 33ok holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any personal data held about you that is inaccurate, incomplete, or out of date.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a rectification request or evaluate an objection.
• Right to Object: You may object to the processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

11 Minors & Age Policy

The 33ok platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21. If you are under 21, you must not register for or use the 33ok platform under any circumstances.

If 33ok discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and permanently close the associated account. Any funds held in such an account may be forfeited in accordance with our Terms & Conditions.

Parents and guardians are encouraged to use parental control software and to monitor their children's online activity to prevent access to gambling platforms. If you believe that a minor has registered with 33ok, please notify us immediately at the contact details in Section 13.

12 Changes to This Policy

33ok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When changes are made, the revised Policy will be published on this page with an updated effective date displayed at the top of the document.

Where a change is material — meaning it significantly affects the way we collect, use, or share your personal data — 33ok will notify registered users via email or an in-platform notification at least 14 days before the change takes effect. For non-material changes, the updated Policy will be effective immediately upon publication.

Your continued use of the 33ok platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights, you may contact the 33ok data support team using the following details:

• Support Email: [email protected]
• Subject Line: Privacy Request — [Your Username]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy queries

All formal privacy and data rights requests must be submitted in writing to the support email address above. We will acknowledge receipt of your request within 3 business days and provide a substantive response within the timeframe applicable to the type of request made.