kd33 Privacy Policy — How We Handle Your Personal Data
At kd33, protecting the privacy of every player is a core responsibility, not an afterthought. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, why we collect it, how we use and store it, and what rights you have over your own information.
Six Ways kd33 Protects Your Privacy
A plain-English summary of the most important privacy commitments kd33 makes to every registered player in Bangladesh.
Minimal Data Collection
kd33 collects only the personal data that is strictly necessary to operate your account, verify your identity, process BDT transactions, and comply with applicable anti-money-laundering obligations. We do not collect unnecessary data.
End-to-End SSL Encryption
All data transmitted between your device and the kd33 platform is protected by 256-bit SSL encryption. Your kd33 Login credentials, payment details, and personal information are never transmitted in plain text.
No Unauthorised Third-Party Sharing
kd33 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data is shared only with trusted service providers (such as bKash, Nagad, and Rocket for payment processing) under strict data-processing agreements.
Secure Data Storage
Personal data held by kd33 is stored on secured servers with access controls, intrusion detection systems, and regular security audits. Only authorised kd33 personnel with a genuine operational need may access stored player data.
Your Rights Over Your Data
You have the right to access, correct, or request deletion of your personal data held by kd33 at any time. Submit a data request to [email protected] and our team will respond within thirty (30) calendar days of receipt.
Transparent Cookie Use
kd33 uses cookies and similar technologies solely to keep your session active, remember your language and display preferences, and improve platform performance. We do not use invasive tracking cookies or sell browsing data to advertisers.
Table of Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Data Sharing and Disclosure
- 8. International Data Transfers
- 9. Data Retention
- 10. Cookies and Tracking
- 11. Your Privacy Rights
- 12. Children and Minors
- 13. Security Measures
- 14. Third-Party Links
- 15. Changes to This Policy
- 16. Contact Us
1 Introduction
kd33 ("we", "us", "our") operates the online betting and casino platform accessible at kd33.io, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to protecting and respecting your privacy in accordance with internationally recognised data protection principles.
This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by kd33. Please read the following carefully to understand our practices regarding your personal data and how we will treat it. This policy applies to all kd33 players and visitors, regardless of the device or method used to access the platform.
By registering an account, completing the kd33 Login process, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must not use the kd33 platform.
This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, all of which form part of your agreement with kd33.
2 Data Controller
For the purposes of applicable data protection law, kd33 is the data controller in respect of the personal data collected from players and visitors to the kd33 platform. As data controller, kd33 determines the purposes and means by which your personal data is processed.
All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our dedicated privacy team at [email protected], with the subject line "Privacy Request". We aim to acknowledge all privacy-related communications within five (5) business days (Bangladesh Standard Time, UTC+6) and to resolve substantive requests within thirty (30) calendar days.
3 Data We Collect
kd33 collects the following categories of personal data from players, either directly (when you provide it to us) or automatically (through your use of the platform):
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Account registration, KYC identity verification, age verification (21+) |
| Contact Data | Email address, mobile phone number, residential address (city, district) | Account communication, transaction alerts, support responses |
| Financial Data | bKash/Nagad/Rocket account numbers, bank account details, transaction history | Deposit and withdrawal processing in BDT, anti-fraud monitoring |
| Technical Data | IP address, device type, browser type, operating system, session duration | Platform security, fraud detection, geolocation verification |
| Usage Data | Pages visited, games played, bets placed, betting patterns, session timestamps | Responsible gaming monitoring, platform improvement, personalisation |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Quality assurance, dispute resolution, regulatory record-keeping |
| Verification Documents | Scanned national ID, selfie photo, utility bill, mobile banking screenshot | KYC compliance, withdrawal verification, anti-money-laundering checks |
kd33 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data unless specifically required by law and with your explicit consent.
4 How We Collect Your Data
kd33 collects personal data through the following channels and methods:
- Direct Provision: Data you provide voluntarily during account registration, the kd33 Login process, KYC verification submission, deposit or withdrawal requests, or when you contact our support team.
- Automated Collection: Technical and usage data collected automatically when you access or interact with the kd33 platform, including through cookies, web beacons, server logs, and similar tracking technologies.
- Payment Providers: Transaction confirmation and identity data received from mobile financial service providers including bKash, Nagad, Rocket, and Upay, and from banking partners including Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank.
- Identity Verification Partners: Results of identity and age-verification checks performed by third-party KYC service providers engaged by kd33.
- Game Providers: Gameplay session data, bet history, and RNG outcome data received from our licensed game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi.
- Fraud Prevention Databases: Screening results from industry-standard fraud prevention and anti-money-laundering databases to which kd33 subscribes in the ordinary course of operating a responsible gambling platform.
5 Legal Basis for Processing
kd33 processes your personal data on one or more of the following legal bases, in accordance with internationally recognised data protection principles:
- Contractual Necessity: Processing that is necessary for kd33 to perform its obligations under the Terms & Conditions you have agreed to, including maintaining your account, processing your BDT deposits and withdrawals, and delivering the betting and gaming services you have requested.
- Legal Obligation: Processing that is required to comply with anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, fraud prevention duties, and any other applicable legal or regulatory obligations.
- Legitimate Interests: Processing carried out in the legitimate interests of kd33, such as improving platform security, detecting and preventing fraud and collusion, responsible gaming monitoring, and improving the overall player experience — where such interests are not overridden by your fundamental privacy rights.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, for optional marketing communications and personalised promotional offers. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of processing carried out before the withdrawal.
6 How We Use Your Data
kd33 uses the personal data we collect for the following specific purposes:
- Creating and managing your kd33 account and enabling secure kd33 Login access
- Verifying your identity and age (21+ requirement) as part of the KYC process
- Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and local bank transfers
- Detecting, investigating, and preventing fraudulent transactions, collusion, multi-accounting, and other prohibited conduct
- Monitoring your gaming activity for responsible gambling purposes, including identifying patterns that may indicate problem gambling behaviour
- Providing 24/7 customer support through live chat and email
- Sending transactional communications including deposit confirmations, withdrawal updates, and account security alerts
- Sending promotional communications about bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season), and platform updates — only where you have provided consent or where permitted by applicable law
- Complying with anti-money-laundering, counter-terrorism financing, and other applicable legal obligations
- Improving the kd33 platform, personalising your experience, and conducting internal analytics to understand how players use our services
- Enforcing our Terms & Conditions and resolving any disputes that may arise between you and kd33
kd33 will not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected without first obtaining your explicit consent.
7 Data Sharing and Disclosure
kd33 does not sell, rent, or trade your personal data. We may share your personal data only in the following circumstances and only to the extent necessary for each stated purpose:
- Payment Service Providers: We share necessary financial and identity data with bKash, Nagad, Rocket, Upay, and our partner banks to process your BDT deposits and withdrawals. These providers are contractually bound to use your data solely for payment processing.
- KYC and Fraud Prevention Partners: We share identity documents and verification data with third-party KYC providers and fraud screening services engaged by kd33. These providers operate under strict data processing agreements.
- Game Providers: Gameplay session identifiers and bet data are shared with game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) solely for the purpose of delivering the game experience and resolving game-related disputes.
- Technology Infrastructure Providers: We engage cloud hosting, content delivery, and security service providers who may process personal data on our behalf as data processors. All such providers are required to maintain appropriate security standards.
- Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of kd33, its players, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of kd33, personal data held by kd33 may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
8 International Data Transfers
kd33 operates internationally, and your personal data may be transferred to and processed in countries outside Bangladesh. Some of these countries may have data protection laws that differ from those in your country of residence.
Where personal data is transferred outside Bangladesh, kd33 takes appropriate steps to ensure that such transfers are carried out in a manner that protects your privacy rights, including requiring recipient organisations to maintain appropriate technical and organisational security measures equivalent to those applied by kd33.
Specifically, data transferred to our payment processing partners (including bKash and Nagad, which operate within Bangladesh) remains subject to Bangladesh's applicable financial data handling obligations. Data transferred to international game providers and technology partners is governed by contractual data protection clauses.
9 Data Retention
kd33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual obligation, AML regulatory requirement |
| KYC identity documents | 5 years from account closure | Anti-money-laundering legal obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Betting and gaming history | 5 years from the date of each transaction | Dispute resolution, responsible gaming monitoring |
| Support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Technical and usage logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of consent basis for marketing |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of personal identifying information. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
10 Cookies and Tracking Technologies
kd33 uses cookies and similar tracking technologies (including web beacons and local storage) to provide a functional, secure, and personalised platform experience. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the kd33 platform to function. These cookies maintain your session after kd33 Login, remember your language preferences, and keep your account basket and balance in sync. They cannot be disabled without impairing platform functionality.
- Performance and Analytics Cookies: Used to collect anonymised information about how players use the kd33 platform — which pages are most visited, how long sessions last, and where errors occur. This data helps us improve platform performance.
- Functional Cookies: Enable enhanced functionality such as remembering your preferred game category (cricket, slots, live casino), your deposit method preference (bKash, Nagad, Rocket), and your display settings.
- Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and automated account access attempts that could compromise your kd33 account security.
kd33 does not use advertising or retargeting cookies, and does not share cookie data with advertising networks. You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the kd33 platform, including the kd33 Login functionality.
11 Your Privacy Rights
As a kd33 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request":
- Right of Access: You have the right to request a copy of all personal data kd33 holds about you. We will provide this information in a structured, commonly used, machine-readable format within thirty (30) calendar days of receiving a valid request.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update certain account details directly through your kd33 account settings; other corrections must be requested via support.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Note that kd33 may be required to retain certain data for legal and regulatory purposes even after an erasure request.
- Right to Restrict Processing: You may request that kd33 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable format and to transmit it to another data controller.
- Right to Object: You have the right to object to the processing of your personal data where kd33 relies on legitimate interests as its legal basis. kd33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
- Right to Withdraw Consent: Where processing is based on consent (such as for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
kd33 will not charge a fee for exercising your privacy rights unless your request is manifestly unfounded or excessive. We may request proof of identity before processing any privacy rights request to ensure we do not disclose personal data to an unauthorised party.
12 Children and Minors
The kd33 platform is strictly for adults aged 21 and above. kd33 does not knowingly collect personal data from any person under the age of 21. The kd33 registration process includes date-of-birth verification, and all accounts are subject to age verification as part of the KYC process.
If kd33 becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all data associated with the account will be securely deleted to the extent permitted by law, and any deposits made will be returned to the originating payment method.
If you believe that a minor has created a kd33 account or provided their personal data to kd33, please contact us immediately at [email protected]. We take underage access extremely seriously and will act promptly on all such reports.
13 Security Measures
kd33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-Bit SSL Encryption: All data transmitted between your device and the kd33 platform is encrypted using industry-standard TLS/SSL protocols. This applies to all kd33 Login sessions, deposit and withdrawal flows, and account management actions.
- Access Controls: Personal data stored by kd33 is accessible only to authorised personnel who have a genuine operational need. Role-based access controls are enforced across all internal systems, and access logs are maintained and reviewed regularly.
- Password Hashing: kd33 Login passwords are never stored in plain text. All passwords are processed using modern cryptographic hashing algorithms with per-user salts, ensuring that even in the event of a data breach, your credentials remain protected.
- Intrusion Detection and Monitoring: kd33's infrastructure is protected by real-time intrusion detection systems, automated anomaly alerts, and 24/7 security monitoring. Any suspicious activity is investigated immediately by our security team.
- Regular Security Audits: kd33 conducts regular internal and third-party security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
- Data Minimisation: kd33 systems are designed on a data-minimisation principle — only the minimum personal data required for each specific purpose is collected and retained, reducing the overall risk surface.
- Incident Response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, kd33 will notify affected players without undue delay and will take immediate remedial action to contain and investigate the breach.
While kd33 employs industry-standard security measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. We encourage all players to use a strong, unique password for their kd33 account and to enable two-factor authentication where available.
14 Third-Party Links
The kd33 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these third-party services — for example, when completing a bKash deposit — you will be subject to the privacy policies of those respective third parties.
kd33 is not responsible for the privacy practices of any third-party service provider, and we encourage you to review the privacy policies of any third party with whom you interact in connection with using the kd33 platform. This Privacy Policy applies solely to personal data collected and processed by kd33 directly.
15 Changes to This Privacy Policy
kd33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform features, data processing practices, or business operations. When we make material changes to this policy, we will:
- Update the "Effective Date" and "Last Revised" date shown at the top of this Privacy Policy page
- Display a prominent notice on the kd33 platform informing players of the update
- Where the changes materially affect how we use your personal data, send a notification to the email address registered to your account
Your continued use of the kd33 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must cease using the kd33 platform and may request account closure by contacting [email protected].
We recommend that all kd33 players review this Privacy Policy periodically to stay informed about how kd33 protects their personal data. The most current version of this policy is always available at kd33.io/privacy-policy.
16 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data kd33 holds about you, please contact our privacy team using the details below. All privacy-related communications should be directed to our dedicated support address, and we will aim to respond within five (5) business days (Bangladesh Standard Time, UTC+6).
- Privacy Enquiries: [email protected] (subject line: "Privacy Request")
- Data Deletion Requests: [email protected] (subject line: "Data Deletion Request")
- Data Access Requests: [email protected] (subject line: "Data Access Request")
- Live Chat Support: Available 24/7 directly on the kd33 platform — response within 3 minutes
- Support Hours: 24 hours a day, 7 days a week, 365 days a year — including all Bangladesh public holidays
For responsible gaming support, self-exclusion requests, or deposit limit adjustments, please contact [email protected] and mark your subject line as "Responsible Gaming Request" to ensure priority handling by our dedicated team.
Your Privacy Matters to kd33
Have questions about how your data is handled? Our 24/7 support team is always ready to help. Explore our FAQ, review our Responsible Gaming policy, or head to kd33 Login to access your account securely. 21+ only. Please gamble responsibly.