Privacy Policy

1 Data We Collect

bak33 collects personal data from you in a number of ways — directly when you provide it during registration, indirectly as you use the Platform, and from third-party sources such as payment processors and identity verification services. We only collect data that is necessary for the purposes described in this Policy.

Information You Provide Directly

When you register a bak33 account or interact with our support team, you provide us with personal information that we store and process. This includes:

• Identity data: Full legal name, date of birth, nationality, and a copy of your government-issued photo ID (National ID card, passport, or driving licence).
• Contact data: Email address, mobile phone number, and residential address (city, district, postcode).
• Financial data: Payment method details including your bKash wallet number, Nagad account number, Rocket account number, or bank account details used for deposits and withdrawals. We do not store full card numbers for Visa or Mastercard — these are handled by our PCI-DSS compliant payment partners.
• Account credentials: Your chosen username and a hashed (encrypted) version of your password. We never store your password in plain text.
• Communications data: The content of emails, live-chat messages, or support tickets you send to the bak33 team.
• Verification documents: Any documents you submit during the Know Your Customer (KYC) process, including selfies, utility bills, and bank statements used to confirm your identity and address.

Information Collected Automatically

When you access the bak33 Platform, certain technical data is collected automatically by our servers and analytics systems:

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and preferred language settings.
• Usage data: Pages visited, games played, bets placed, session duration, click-path data, and feature interactions within the Platform.
• Transaction data: A full log of all deposits, withdrawals, bonus claims, wagers, wins, and losses associated with your account.
• Geolocation data: Approximate geographic location derived from your IP address, used to comply with jurisdictional access restrictions.
• Cookie and tracking data: Information stored in cookies and similar tracking technologies as described in Section 4 of this Policy.

Information from Third Parties

bak33 may receive personal data about you from the following categories of third-party sources:

• Payment providers: bKash, Nagad, Rocket, Upay, and card-processing partners provide transaction confirmation and fraud-screening data.
• Identity verification services: Third-party KYC providers used to verify the authenticity of identity documents you submit.
• Fraud and risk intelligence services: Databases used to screen for known fraudulent actors, sanctioned individuals, or persons subject to self-exclusion schemes.
• Affiliate partners: Where you arrive at the bak33 Platform via a licensed affiliate link, we may receive a referral identifier — but no additional personal data beyond what you provide at registration.

2 How We Use Your Data

bak33 processes your personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties, and we do not use it for purposes that are incompatible with those listed below.

Service Delivery

The primary purpose for which we process your data is to operate and improve the bak33 Platform. This includes creating and managing your player account, processing deposits and withdrawals in BDT, providing access to games such as cricket betting, live casino, slots, and the Tower game, delivering customer support, and sending you transactional notifications (e.g., deposit confirmations, withdrawal approvals, and security alerts).

Identity Verification and Legal Compliance

We are required to verify the identity of all players before processing withdrawal requests. This KYC obligation helps prevent fraud, money laundering, and underage gambling. Your identity documents are processed solely for verification purposes and are not used for marketing or shared with non-essential third parties.

Responsible Gaming and Player Protection

bak33 uses your usage data and transaction history to monitor for signs of problem gambling behaviour. Where our systems detect unusual betting patterns, rapid deposit sequences, or other indicators of potential harm, our Responsible Gaming team may reach out to offer support resources or, where necessary, apply protective account restrictions. This processing is carried out in your interests and in accordance with our responsible gaming obligations.

Fraud Prevention and Platform Security

Technical and usage data — including IP addresses, device fingerprints, and transaction logs — is analysed by our security systems to detect and prevent fraud, account takeovers, bot activity, and other forms of platform abuse. This processing is essential to maintaining a safe environment for all bak33 players.

Marketing Communications

With your explicit consent, bak33 may send you promotional emails, SMS notifications, or in-Platform messages about bonuses, new games, seasonal promotions (such as Eid or BPL-season offers), and platform updates. You can withdraw your consent and opt out of marketing communications at any time by contacting [email protected] or by using the unsubscribe link included in every promotional email. Opting out of marketing does not affect your access to the Platform or any transactional communications.

Platform Analytics and Improvement

Aggregated and anonymised usage data is used to understand how players interact with the bak33 Platform, identify popular games and features, improve the user interface and experience, and guide product development decisions. This analytics processing does not identify individual users and cannot be used to make decisions about your account.

3 Data Sharing & Disclosure

bak33 does not share your personal data with third parties except in the specific circumstances described below. In all cases, we require third-party recipients to implement appropriate data security measures and to use your data only for the specified purpose.

Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners: bKash, Nagad, Rocket, Upay, and our card-processing gateway for Visa and Mastercard transactions. These providers are contractually bound to handle your data securely and to use it only for transaction processing purposes.

Identity and KYC Verification Partners

Your identity documents — including your National ID card copy, selfie, and proof-of-address documents — are shared with our third-party KYC verification provider for the sole purpose of confirming your identity. Once verification is complete, documents are retained in accordance with our data retention schedule (see Section 5) and then securely deleted.

Technology and Infrastructure Providers

bak33 operates on cloud infrastructure and uses third-party software services for functions such as email delivery, customer support ticketing, and security monitoring. These service providers act as data processors on our behalf and may have access to your personal data only to the extent required to perform their designated function. They are not permitted to use your data for any other purpose.

Game Providers

Where you play games provided by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a session token and anonymised player identifier may be passed to the relevant game provider to enable gameplay. Your full name, payment details, and contact information are not shared with game providers.

Legal and Regulatory Disclosure

bak33 may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, protect the rights of bak33 or its players, or comply with a valid legal process. We will, where permitted by law, notify you of any such disclosure request.

4 Cookies & Tracking

bak33 uses cookies and similar tracking technologies (collectively, "cookies") to operate the Platform, remember your preferences, and understand how users navigate our site. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account security state, and remember items in your active gaming session. You cannot opt out of these cookies without preventing use of the Platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and game filters — so you do not need to re-enter them on every visit.
• Analytics cookies: bak33 uses internal analytics tools (not third-party advertising networks) to count page visits, measure session lengths, and identify the most popular game categories. This data is aggregated and does not personally identify you.
• Security cookies: These cookies help detect and prevent fraudulent login attempts, bot traffic, and unusual session behaviour. They are a core part of our platform security infrastructure.

Managing Your Cookie Preferences

You can control cookie storage through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair or prevent access to the bak33 Platform. To manage cookies in your browser, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, or your mobile browser of choice).

5 Data Retention

bak33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard data retention periods by category.

Once the applicable retention period expires, personal data is securely and permanently deleted or anonymised so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

6 Your Privacy Rights

As a bak33 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a description of your request. We will acknowledge your request within 5 business days and aim to fulfil it within 30 days, subject to identity verification and any applicable legal restrictions.

• Right of access: You have the right to request a copy of the personal data bak33 holds about you. We will provide this in a structured, readable format.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For some data fields (such as your registered name), we may require identity verification before making changes.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot delete transactional records required by law.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a portable, machine-readable format so that you can transfer it to another service provider.
• Right to object to marketing: You have the right to object to processing of your personal data for direct marketing purposes at any time. We will honour such requests promptly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7 Data Security

bak33 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and bak33's servers is encrypted in transit using industry-standard TLS protocols.
• Password hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms so that even in the unlikely event of a data breach, your password cannot be recovered.
• Access controls: Personal data is accessible only to bak33 staff and systems that have a legitimate need. Role-based access controls and audit logs are maintained for all data access events.
• Infrastructure security: The bak33 Platform is hosted on secure, regularly patched server infrastructure with firewall protection, intrusion detection systems, and DDoS mitigation in place.
• Regular security reviews: Our security posture is reviewed regularly. We conduct internal security assessments and address identified vulnerabilities promptly.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights, bak33 will notify affected players without undue delay and take all reasonable steps to contain and mitigate the breach.

While bak33 implements robust security measures, no online platform can guarantee absolute security. You also have a responsibility to keep your account credentials confidential and to use a strong, unique password for your bak33 account. If you suspect that your account has been compromised, contact us immediately at [email protected].

8 Policy Updates & Contact

bak33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. Where a change is material — meaning it significantly affects the way we process your personal data or the rights available to you — we will notify registered players via email at least 14 days before the change takes effect.

The "Last updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how bak33 protects your data. Your continued use of the Platform after a Policy update constitutes your acceptance of the revised terms.

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bak33's handling of your personal data, please contact our Data Protection team using the details below. We are committed to addressing your privacy concerns promptly and transparently.

• Email: [email protected]
• Subject line: "Privacy Request — [Your Registered Email]"
• Response time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 5 business days.
• Language: All correspondence should be submitted in English.