33mw Privacy Policy

1 Introduction and Scope

33mw ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers, visits, or interacts with the 33mw platform, including its website at 33mw.io, its mobile-optimised interface, and any associated services (collectively, the "Platform"). This Privacy Policy describes how 33mw collects, uses, stores, shares, and protects personal data in connection with the operation of its online casino and sports betting services, which are primarily directed at players based in Bangladesh.

This Privacy Policy applies to all personal data provided to 33mw by players and prospective players, regardless of the channel through which it was submitted — including account registration forms, identity verification submissions, payment transactions, customer support communications, and automatic technical data collected during your use of the Platform.

By registering an account on the 33mw Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not register an account or continue using the Platform.

2 Data Controller Information

For the purposes of applicable data protection law, 33mw acts as the data controller in respect of all personal data collected from players through the Platform. As data controller, 33mw determines the purposes for which personal data is collected and the means by which it is processed. 33mw takes this responsibility seriously and is committed to ensuring that all data processing activities are conducted lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to contact 33mw in its capacity as data controller, please use the contact details set out in section 15 of this Policy. All data-related enquiries are handled by our dedicated support team and will be acknowledged within 48 hours of receipt.

3 Personal Data We Collect

33mw collects the following categories of personal data from players and, where applicable, from third-party sources such as identity verification and fraud prevention providers:

33mw does not collect or process any special categories of sensitive personal data — such as racial or ethnic origin, religious beliefs, health data, or biometric data — except where the player voluntarily discloses such information in the context of a responsible gaming or self-exclusion request, in which case that information is used solely for the purpose of fulfilling that request.

4 How We Collect Your Data

33mw collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when you register an account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated collection: Technical and usage data collected automatically by the Platform's servers, analytics tools, and cookies as you browse and interact with the site. See section 8 for full details on cookies.
• Third-party providers: Identity verification agencies and fraud prevention databases may provide us with confirmation of your identity details and alerts relating to known fraudulent activity. Payment processors share transaction confirmation data with us to facilitate your deposits and withdrawals.
• Responsible gaming disclosures: Where you voluntarily contact 33mw to request a deposit limit, cooling-off period, or self-exclusion, the information you provide in that context is recorded and acted upon immediately.

5 Legal Bases for Processing

33mw processes your personal data on the following legal bases, depending on the purpose of the processing activity in question:

• Contractual necessity: Processing that is required to fulfil our contractual obligations to you as a registered player — including account management, processing deposits and withdrawals, settling bets and game rounds, and providing customer support.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money-laundering (AML) requirements, identity verification obligations, and fraud prevention duties.
• Legitimate interests: Processing undertaken for the legitimate business interests of 33mw where those interests are not overridden by your privacy rights — including platform security, fraud detection, responsible gaming monitoring, and internal analytics to improve the Platform.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit and freely withdrawable consent. You may withdraw consent for marketing at any time by contacting our support team.

6 How We Use Your Data

33mw uses the personal data collected from players for the following specific purposes. Each purpose is linked to a legal basis as described in section 5:

• To create, administer, and maintain your 33mw player account, including verifying your identity and age eligibility (21+) at registration and at any subsequent verification stage.
• To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and any other payment channels made available on the Platform.
• To settle all bets, game rounds, and tournament results fairly and accurately, and to credit winnings to your account balance.
• To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, bonus exploitation, and any other conduct prohibited under the 33mw Terms & Conditions.
• To monitor gaming activity for responsible gaming purposes, including identifying behavioural patterns that may indicate problem gambling and enforcing any deposit limits, cooling-off periods, or self-exclusion requests that you have activated.
• To provide customer support, respond to your enquiries and complaints, and maintain a record of our communications for quality assurance and dispute resolution purposes.
• To send you transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — that are necessary for the operation of your account.
• To send you marketing communications about 33mw promotions, bonuses, and new games, but only where you have provided explicit consent to receive such communications.
• To analyse aggregated, anonymised usage data to improve the performance, design, and content of the Platform. This analysis does not identify individual players.
• To comply with all applicable legal and regulatory obligations imposed on 33mw in connection with the operation of its online gaming services.

7 Sharing Your Data

33mw does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and any other payment service providers used by 33mw receive the transaction data necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own services and their own privacy policies apply to the data they process.
• Identity verification providers: Third-party KYC and AML screening services receive the identity documents and personal details you submit during the verification process, solely for the purpose of confirming your identity and screening against fraud and sanctions databases.
• Game content providers: Third-party game studios and live casino operators — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive a session token and anonymous player identifier to facilitate your game session. These providers do not receive your full personal profile.
• Legal and regulatory authorities: 33mw may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or valid legal process.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the 33mw business, personal data held by 33mw may be transferred to the acquiring entity as part of the transaction, subject to the same data protection obligations as described in this Policy.

8 Cookies and Tracking Technologies

33mw uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to remember your session and preferences, and to gather anonymous statistical data about how players use the Platform. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect against cross-site request forgery attacks. Essential cookies cannot be disabled without preventing core functionality from operating.
• Functional cookies: Used to remember your preferences — such as your preferred language setting and any responsible gaming limits you have set — so that they are applied automatically each time you log in.
• Analytics cookies: Used to collect anonymous, aggregated data about how players navigate the Platform, which pages are visited most frequently, and where players encounter errors. This data is used solely to improve the Platform and does not identify individual users.
• Security and fraud-detection cookies: Used to identify unusual patterns of access, flag potentially automated or fraudulent activity, and protect the integrity of player accounts.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of the Platform. 33mw does not use third-party advertising or behavioural tracking cookies that follow you across other websites.

9 Data Retention

33mw retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymised data is retained for statistical purposes, it is no longer considered personal data.

10 Data Security

33mw implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 33mw Platform.
• Encryption of sensitive data fields — including identity document details and payment account references — at rest within our database infrastructure.
• Strict role-based access controls, ensuring that only authorised personnel whose job function requires access to personal data can view it, with all access events logged and periodically audited.
• Regular security assessments and penetration testing of the Platform's infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Secure password hashing using industry-standard algorithms, meaning that no 33mw employee can view your account password in plain text.
• Incident response procedures that provide for prompt containment, investigation, and notification in the event of any confirmed data breach that poses a risk to player rights.

While 33mw takes every reasonable measure to protect your data, no digital system can guarantee absolute security. You play an important role in keeping your account secure by using a strong unique password, keeping your login credentials confidential, and contacting us immediately at [email protected] if you suspect any unauthorised access to your account.

11 Your Data Rights

As a 33mw player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in section 15. We will respond within 30 days of receiving a valid request. There is no charge for exercising your rights in standard circumstances.

• Right of access: You may request a copy of all personal data that 33mw holds about you, together with information about how it is being used and on what legal basis.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic account information directly through your account settings, or contact our support team for corrections to verification records.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is subject to overriding legal obligations — for example, transaction records that must be retained under AML law cannot be deleted on request.
• Right to restriction of processing: You may request that 33mw restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, and to withdraw consent for marketing communications at any time. Upon receipt of a valid objection to marketing, we will cease all marketing communications immediately.

12 Marketing Communications

33mw may send you promotional communications about bonuses, new games, seasonal offers, and platform updates by email or SMS, but only where you have given your explicit consent to receive such communications. Consent for marketing is requested at the point of account registration and may be updated at any time through your account settings or by contacting our support team.

You may withdraw consent for marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe — Marketing". Upon receipt of your request, we will remove you from all marketing distribution lists within five business days. Withdrawal of marketing consent does not affect the lawfulness of any marketing we sent to you before your consent was withdrawn, and it does not affect the receipt of transactional communications that are necessary for the operation of your account (such as deposit confirmations and security alerts).

13 Children and Minors

The 33mw Platform is strictly for adults aged 21 and above. 33mw does not knowingly collect personal data from any person under the age of 21. The age verification steps built into the registration and KYC processes are specifically designed to prevent under-age individuals from accessing the Platform.

If 33mw becomes aware — through any means — that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all activity on the account will be reviewed and reversed to the extent possible, and the personal data of the minor will be deleted from our systems without delay, except where retention is required by law to address the circumstances of the under-age access.

If you are a parent or guardian and believe that your child may have accessed the 33mw Platform and provided personal data, please contact our support team immediately at [email protected] so that we can investigate and take prompt action.

14 Changes to This Policy

33mw reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services offered on the Platform. Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — we will notify you in advance by email to your registered address or via a prominent in-platform notification, before the revised policy takes effect.

The effective date displayed at the top of this page will be updated each time a new version of this Privacy Policy is published. We encourage you to review this Policy periodically to stay informed about how 33mw protects your personal data. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.

15 Contact and Data Requests

For all privacy-related enquiries, data rights requests, marketing opt-out requests, or concerns about how 33mw handles your personal data, please contact our support team using the details below. We are committed to handling every privacy enquiry promptly, professionally, and with full confidentiality.

• Email (plain text — not a link): [email protected]
• Subject line for data rights requests: "Data Rights Request — [your registered username]"
• Subject line for marketing opt-out: "Unsubscribe — Marketing"
• Support availability: 24 hours a day, 7 days a week
• Acknowledgement target: within 48 hours of receipt
• Response / resolution target: within 30 days for formal data rights requests

We take every privacy concern seriously and will work diligently to resolve your request within the stated timeframes. Where a request is complex or voluminous, we will notify you within the initial 30-day window if an extension of up to a further 60 days is required, together with the reasons for the extension.