bh33 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how bh33 ("bh33", "we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("Player", "User", "you") who access or use the bh33 platform at https://bh33.io, including all associated services, games, betting markets, payment facilities, and customer support channels.

This Policy applies to all players regardless of the device or method used to access bh33, including desktop browsers, mobile browsers, and any dedicated application. By registering an account on bh33, you acknowledge that you have read this Policy in full and that you consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the bh33 Terms & Conditions, which together form the complete legal framework governing your use of the platform. Where this Policy uses terms defined in the Terms & Conditions, those definitions apply here unless stated otherwise.

2 Data Controller

bh33 is the data controller in respect of personal data collected through the platform. As data controller, bh33 is responsible for determining the purposes for which and the manner in which your personal data is processed. If you have any questions about this Policy or wish to exercise any of your data rights, you may contact bh33 directly using the details provided in Section 14 of this Policy.

Where bh33 engages third-party service providers who process personal data on bh33's behalf (for example, payment processors or identity verification services), those providers act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purposes for which they were engaged.

3 Personal Data We Collect

bh33 collects personal data through several channels, including account registration forms, transaction records, device and browser data, and communications with the support team. The categories of data collected are set out below.

3.1 Registration & Identity Data

When you create a bh33 account, we collect: full name, date of birth, email address, mobile phone number, residential address (including district and division within Bangladesh where applicable), and a chosen username. This data is required to create your account and verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification Documents

To comply with our anti-money laundering (AML) obligations and to confirm player identity, bh33 may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or driving licence. We may also request proof of address such as a utility bill or bank statement dated within the previous three months.

3.3 Financial & Transaction Data

When you make a deposit or request a withdrawal, bh33 records the transaction amount in BDT, the payment method used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction timestamp, and a transaction reference number. bh33 does not store complete payment card numbers or mobile banking PINs — these are handled directly by the respective payment processors.

3.4 Betting & Gaming Activity Data

bh33 maintains records of all bets placed, games played, session durations, stake amounts, and outcomes associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

3.5 Technical & Device Data

When you access bh33, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited within the platform. This data is used to ensure platform security, detect fraudulent access, and improve the player experience.

3.6 Communications Data

If you contact the bh33 support team via live chat or email, we retain a record of that communication including the content of messages, timestamps, and any attachments provided. This data is used to resolve your query and to improve our support quality.

Data Category	Examples	Primary Purpose
Identity Data	Name, date of birth, NID number	Account creation, age verification, KYC
Contact Data	Email, phone number, address	Communications, account recovery
Financial Data	bKash number, transaction amounts in BDT	Payment processing, AML compliance
Gaming Activity	Bet history, session length, win/loss records	Account management, responsible gaming
Technical Data	IP address, device type, browser	Security, fraud prevention, analytics
Communications	Support chat transcripts, emails	Dispute resolution, quality assurance

4 How We Use Your Personal Data

bh33 uses the personal data collected for the following purposes:

• Account administration: Creating and maintaining your player account, verifying your identity, and enabling access to all platform features.
• Payment processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and other accepted payment methods in BDT.
• Regulatory compliance: Meeting obligations under applicable anti-money laundering laws, counter-terrorism financing requirements, and age verification standards.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, collusion, and other forms of platform abuse.
• Responsible gaming: Monitoring betting patterns to identify players who may be showing signs of problem gambling, and facilitating access to self-exclusion and limit-setting tools.
• Customer support: Responding to queries, resolving disputes, and maintaining a record of support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, navigation, and overall player experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications (see Section 12).

5 Legal Bases for Processing

bh33 processes personal data only where a lawful basis exists for doing so. The primary legal bases on which bh33 relies are as follows:

• Contractual necessity: Processing required to perform the contract between bh33 and the player — specifically, operating the account, processing bets, and facilitating payments.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and data retention obligations.
• Legitimate interests: Processing carried out for bh33's legitimate business interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by the player's privacy rights.
• Consent: Processing for which bh33 relies on your explicit consent, such as the sending of direct marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

6 Data Sharing & International Transfers

6.1 Service Providers. bh33 shares personal data with carefully selected third-party service providers who assist in delivering the platform's services. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC service providers, fraud detection and AML screening vendors, cloud hosting and infrastructure providers, and customer support software providers. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to bh33.

6.2 Game Studios. The casino game studios whose products are available on bh33 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive limited technical data (such as a pseudonymous player session token) necessary to operate their games within the bh33 platform. These studios do not receive your full identity or financial data.

6.3 Legal Disclosure. bh33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the rights, property, or safety of bh33, its players, or the public.

6.4 No Sale of Data. bh33 does not and will never sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes.

7 Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. bh33 uses cookies and similar tracking technologies (such as web beacons and local storage) to enable core platform functionality, maintain your login session, prevent fraud, and gather anonymised analytics data.

7.2 Types of Cookies Used. bh33 uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session management cookies that keep you logged in during a gaming session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform, which game categories are most visited, and how long sessions last. This data is used to improve the platform and is not linked to your personal identity.
• Preference cookies: Store your platform preferences such as display settings and previously visited sections to personalise your experience on return visits.
• Security & fraud prevention cookies: Help bh33 detect unusual access patterns, multi-account attempts, and automated bot activity by tracking device fingerprint characteristics across sessions.

7.3 Managing Cookies. You may manage or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may limit your ability to use some features of the bh33 platform. Instructions for managing cookies are available in the help documentation of your specific browser.

8 Data Retention

8.1 Active Accounts. For accounts that remain active, bh33 retains personal data and transaction records for the lifetime of the account. This is necessary to provide the ongoing service, manage the player relationship, and maintain betting records for dispute resolution.

8.2 Closed Accounts. When an account is closed — whether voluntarily by the player or by bh33 following a breach of the Terms & Conditions — bh33 retains the account data for a minimum period of five years from the date of closure. This retention period is required to comply with AML record-keeping obligations and to handle any post-closure disputes or legal claims.

8.3 Identity Documents. Copies of identity verification documents (NID, passport, proof of address) are retained for a minimum of five years from the date of submission. These records may be required by financial regulators or law enforcement in connection with AML investigations.

8.4 Support Communications. Records of support communications are retained for a period of two years from the date of the interaction, after which they are deleted unless they relate to an ongoing dispute or regulatory matter.

8.5 Anonymous Analytics Data. Aggregated, anonymised analytics data that cannot be linked to any individual player is retained indefinitely for platform improvement purposes.

9 Data Security

bh33 implements a layered approach to data security that includes both technical and organisational measures. Technical measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, firewalled server infrastructure with restricted access controls, regular third-party security audits and penetration testing, and real-time intrusion detection and anomaly monitoring systems.

Organisational measures include access controls that restrict employee access to personal data on a strict need-to-know basis, confidentiality obligations for all staff and contractors who handle player data, staff training on data protection and security practices, and a documented incident response procedure that includes player notification obligations in the event of a significant data breach.

While bh33 takes all reasonable steps to protect your personal data, no security system is entirely impenetrable. In the unlikely event of a data breach that poses a risk to your rights, bh33 will notify affected players and relevant authorities in accordance with applicable law.

10 Your Data Rights

As a data subject, you hold the following rights in respect of your personal data held by bh33. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Right Type]". bh33 will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days.

• Right of access: You may request a copy of all personal data bh33 holds about you, together with information about how it is used.
• Right to rectification: If any personal data bh33 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: In certain circumstances you may request the deletion of your personal data. This right does not apply where retention is required by law (for example, AML record-keeping requirements).
• Right to restrict processing: You may request that bh33 limit the processing of your personal data in specific circumstances, such as during a dispute about its accuracy.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that bh33 provide your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of bh33's legitimate interests. bh33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, direct marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

11 Children & Minors

bh33 strictly prohibits the use of its platform by persons under the age of 21. bh33 does not knowingly collect personal data from individuals under 21 years of age. If bh33 discovers or is notified that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted to the extent permitted by law, and any funds held in the account will be handled in accordance with bh33's age violation procedures described in the Terms & Conditions.

If you believe that a person under the age of 21 has registered an account on bh33, please notify us immediately at [email protected]. bh33 takes all such reports seriously and will investigate promptly.

12 Marketing Communications

12.1 Opt-In Basis. bh33 sends promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and special offers only to players who have expressly opted in to receive such communications during registration or through their account settings.

12.2 Opt-Out. You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your account settings or by clicking the unsubscribe link included in any marketing email. Following opt-out, bh33 will cease sending marketing communications within five business days. Please note that opting out of marketing does not affect transactional communications related to your account, such as deposit confirmations, withdrawal notifications, or security alerts.

12.3 No Third-Party Marketing. bh33 does not share your contact details with third parties for the purpose of their own direct marketing activities.

13 Changes to This Privacy Policy

bh33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made, bh33 will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this Policy. Continued use of the bh33 platform following the notification of changes constitutes your acceptance of the revised Policy.

We encourage players to review this Privacy Policy periodically to stay informed about how bh33 protects personal data. The most current version of this Policy is always available at https://bh33.io/privacy-policy.

14 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data right, or have a concern about how bh33 has handled your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights: "Data Rights Request — [Right Type]"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Operating Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 72 hours; substantive response within 30 calendar days

bh33 takes all privacy complaints seriously. If you are not satisfied with bh33's response to a privacy complaint, you may have the right to escalate your complaint to a relevant supervisory authority in your jurisdiction.