33mwm Privacy Policy — How We Collect, Use, and Protect Your Data

1 Who We Are

33mwm is an online casino and sports betting platform operating at 33mwm.io. We provide services including live casino games, slots, cricket betting, Teen Patti, and a range of other gaming products to players located in Bangladesh. Our platform is designed with a mobile-first infrastructure, optimised for the devices and networks most widely used across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

For the purposes of this Privacy Policy, "33mwm", "we", "us", and "our" refer to the operator of the 33mwm platform. "You" and "your" refer to any individual who accesses the 33mwm website, registers an account, or otherwise interacts with our services.

All questions, data access requests, and privacy-related complaints should be directed to: [email protected]

2 Personal Data We Collect

Depending on how you interact with the 33mwm platform, we may collect the following categories of personal data:

3 How We Collect Your Data

33mwm collects personal data through the following methods:

• Direct collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technical collection: Data gathered automatically by our platform systems when you access the website, including IP address, device fingerprint, browser data, and session activity logs.
• Cookies and tracking technologies: First-party cookies and similar technologies used to maintain your logged-in session, remember your preferences, and analyse how the platform is used. See Section 6 for full details on our cookie practices.
• Third-party service providers: Data received from payment processing partners (such as bKash, Nagad, Rocket, and Upay) confirming transaction status, or from KYC verification partners confirming identity document authenticity.
• Game providers: Game session data and bet records shared by our third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) for the purposes of account crediting, dispute resolution, and transaction logging.

4 Why We Use Your Personal Data

33mwm uses your personal data for the following specific, clearly defined purposes:

• Account creation and management: To register your account, maintain your player profile, and provide you access to all 33mwm platform services.
• Age and identity verification (KYC): To confirm that you are 21 years of age or older and that you are who you claim to be, in accordance with responsible gaming obligations and anti-fraud standards.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank transfer methods, and to maintain accurate financial records for your account.
• Platform operation and game delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the 33mwm platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming compliance: To enforce self-exclusion agreements, deposit limits, loss limits, session time reminders, and cooling-off periods activated by you or applied by 33mwm.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our support channels.
• Marketing and promotions: To send you promotional offers, bonus notifications, and seasonal campaign communications, where you have consented to receive such communications. See Section 13 for opt-out options.
• Platform improvement and analytics: To analyse how the platform is used, identify technical issues, and improve the user experience for players across Bangladesh.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) requirements, respond to lawful requests from authorities, and maintain records as required by law.

5 Legal Basis for Processing

33mwm processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering standards, KYC obligations, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing that is necessary for 33mwm's legitimate business interests, where those interests are not overridden by your rights — including fraud detection, platform security, analytics, and responsible gaming enforcement.
• Consent: Processing based on your explicit consent, primarily for marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Cookies and Tracking Technologies

33mwm uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your platform experience.
• Analytics cookies: First-party analytics tools that collect aggregated, anonymised data about how players navigate the platform. This data is used solely to improve the 33mwm platform and is never shared with third-party advertising networks.
• Security cookies: Used to detect suspicious login behaviour, flag unusual account activity, and support our fraud prevention systems.

33mwm does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your browsing activity across external websites. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent you from using the platform.

7 Sharing Your Personal Data

33mwm does not sell, rent, or trade your personal information to any third party. We may share your data in the following limited, controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other payment partners receive the minimum transaction data required to process your deposits and withdrawals. These partners operate under their own privacy policies and are independently regulated.
• KYC and identity verification partners: Third-party identity verification services receive your identity documents and verification data for the sole purpose of confirming your identity and age. These partners are contractually bound to process data only for KYC purposes.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios receive session data and bet records necessary to operate their games and resolve disputes. Game providers do not receive your identity documents or financial account details.
• Platform infrastructure providers: Cloud hosting, database management, and cybersecurity service providers that support the technical operation of the 33mwm platform. All such providers operate under data processing agreements that limit their use of your data to the services they provide to us.
• Legal and regulatory authorities: Where required by law, by court order, or in response to a legitimate request from a regulatory or law enforcement body, 33mwm will disclose the minimum personal data necessary to comply with the legal requirement.

8 Data Security

33mwm implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, ensuring your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including passwords (hashed using industry-standard algorithms), identity document scans, and financial account details.
• Access controls limiting internal access to personal data on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring systems that log and alert on unusual access patterns, failed authentication attempts, and other indicators of potential security incidents.
• Regular security audits conducted to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of protection beyond your password.

In the event of a personal data breach that is likely to result in a risk to your rights and interests, 33mwm will notify affected players at the registered email address on their account within 72 hours of becoming aware of the breach, describing the nature of the incident and the steps we are taking to address it.

9 Data Retention

33mwm retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following retention standards:

• Active account data: Retained for the full duration of your account with 33mwm, plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC documents: Identity documents and verification records are retained for a minimum of 5 years following account closure, in line with AML compliance obligations.
• Transaction and betting records: Financial transaction history and bet records are retained for a minimum of 5 years following the date of each transaction, for regulatory compliance and dispute resolution purposes.
• Support communications: Customer support correspondence is retained for 3 years from the date of the most recent interaction, to support quality assurance and dispute resolution.
• Technical and usage logs: Server logs, IP address records, and session activity data are retained for a maximum of 13 months, after which they are anonymised or deleted.
• Marketing consent records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with consent requirements.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information. Where anonymisation is used rather than deletion, the resulting data may be retained and used for aggregated analytics purposes.

10 Your Privacy Rights

As a player on the 33mwm platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your account:

• Right of access: You may request a copy of the personal data 33mwm holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Name and date of birth corrections may require supporting documentation.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data. Note that we may be required to retain certain data for legal and regulatory compliance purposes even after your account is closed, as described in Section 9.
• Right to restrict processing: You may request that we limit the way we use your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that we provide your personal data in a machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing at any time.
• Right to withdraw consent: Where we process your data based on consent (primarily for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all valid privacy rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

11 Children's Privacy and Underage Players

The 33mwm platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use any part of the 33mwm service.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account with 33mwm, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary action.

12 Third-Party Links and Services

The 33mwm platform may contain references to third-party game providers, payment partners, and other services. While we take care to work only with reputable partners, 33mwm is not responsible for the privacy practices of any third-party service whose platform you access independently of 33mwm.

When you interact with a third-party payment provider such as bKash, Nagad, or Rocket to complete a transaction, you are also subject to that provider's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party services you use in connection with your 33mwm account.

Third-party game providers such as Pragmatic Play, Evolution Gaming, and Spribe operate their game engines under their own data protection frameworks. The data shared with game providers is limited to what is strictly necessary for game delivery and account crediting, as described in Section 7.

13 Marketing Communications

With your consent, 33mwm may send you promotional emails, SMS notifications, and in-platform messages about bonuses, seasonal promotions, new game launches, and sporting events relevant to Bangladesh — including BPL cricket, T20 World Cup, IPL, and other tournaments.

You can manage your marketing preferences in the following ways:

• Email opt-out: Click the "Unsubscribe" link included at the bottom of every marketing email. This will remove you from all 33mwm marketing email lists within 5 business days.
• SMS opt-out: Reply "STOP" to any marketing SMS received from 33mwm to be removed from SMS marketing lists.
• Account settings: Update your communication preferences directly in your 33mwm account settings at any time.
• Direct request: Contact [email protected] and request removal from all marketing communications.

Please note that opting out of marketing communications does not affect transactional communications — you will continue to receive emails relating to account activity, deposits, withdrawals, security alerts, KYC verification, and important policy updates regardless of your marketing preferences.

14 Changes to This Privacy Policy

33mwm reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players via the email address on their account at least 7 days before the updated policy takes effect.

The "Last Reviewed" date at the top of this page will be updated whenever this policy is revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Continued use of the 33mwm platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and contact [email protected] to request account closure before the revised policy takes effect.

15 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related concern, please contact the 33mwm data team using the details below:

• Email: [email protected]
• Response time: Within 2 business hours during standard operating hours (Bangladesh Standard Time, UTC+6)
• Availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays

All privacy requests must be submitted in writing via email from the address registered to your 33mwm account, so that we can verify your identity before disclosing or modifying any personal data. 33mwm will acknowledge all privacy requests within 24 hours and provide a substantive response within 30 days.