bgp33 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

bgp33 ("bgp33", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://bgp33.io. This Privacy Policy describes how bgp33 collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "the Player") who access or use the bgp33 platform, including all games, promotions, customer support services, and payment functions available through the website.

bgp33 is committed to protecting your privacy and ensuring that your personal data is handled responsibly, securely, and in accordance with applicable data protection principles. We process personal data only where we have a lawful basis to do so, and we ensure that data subjects are kept informed about how their information is used.

By registering an account on bgp33, making a deposit, placing a bet, or otherwise accessing the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must discontinue your use of the bgp33 platform.

2. Personal Data We Collect

bgp33 collects several categories of personal data depending on how you interact with the platform. The following table summarises the types of data collected and the context in which they arise:

bgp33 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by law or with your explicit consent for specific purposes such as problem gambling support referrals.

3. How We Collect Your Data

3.1 Directly From You

The majority of personal data bgp33 holds about you is provided directly by you in the course of using our platform. This includes information submitted during account registration, data provided during KYC verification, preferences set in your account dashboard, and communications sent to our support team.

3.2 Automatically Through Platform Use

When you access the bgp33 website, certain technical and usage data is collected automatically via server logs, cookies, and similar technologies. This data includes your IP address, device identifiers, browser information, the pages you visit, the duration of your sessions, and the actions you take on the platform. This automated collection is necessary for the platform to function correctly and to maintain security.

3.3 From Third-Party Service Providers

bgp33 may receive personal data about you from trusted third parties in the following circumstances:

• From identity verification service providers during the KYC process — to confirm the authenticity of documents you submit;
• From payment processors (including bKash, Nagad, Rocket, Visa, and Mastercard) to confirm transaction status and detect fraudulent activity;
• From fraud detection agencies and anti-money-laundering databases as part of our compliance obligations;
• From game providers (such as Evolution Gaming and Ezugi) regarding game session data where it is required to resolve disputes.

4. Purpose and Legal Basis for Processing

bgp33 processes your personal data for specific, legitimate purposes. For each purpose, a lawful basis for processing exists as outlined below:

• Account Registration and Management: Processing is necessary to perform the contract between you and bgp33 — without your identity and contact data, we cannot create or manage your account.
• Identity Verification (KYC): Processing is necessary to comply with legal obligations related to anti-money-laundering and responsible gaming regulations.
• Payment Processing: Processing financial data is necessary to perform the contract — to receive your deposits and process your withdrawal requests.
• Platform Security and Fraud Prevention: Processing technical data is necessary for bgp33's legitimate interest in maintaining a secure, fair, and compliant gaming environment.
• Customer Support: Processing communications data is necessary to perform the contract by responding to your queries and resolving your complaints.
• Responsible Gaming Monitoring: Processing gaming activity data is necessary to comply with legal obligations and to protect the vital interests of players who may be at risk of problem gambling.
• Marketing Communications: Where you have given explicit consent, bgp33 may send you promotional offers, bonus notifications, and news via email or SMS. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.
• Platform Improvement and Analytics: Processing aggregated usage data is in bgp33's legitimate interest to improve the platform's performance, game selection, and user experience.

5. Sharing Your Personal Data

bgp33 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data with the following categories of recipients where necessary and on a strictly need-to-know basis:

5.1 Service Providers

bgp33 engages third-party companies to provide technical and operational services on our behalf, including cloud hosting providers, KYC and identity verification platforms, payment processing gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud detection tools, customer support software vendors, and analytics platforms. All service providers are bound by data processing agreements and are prohibited from using your data for any purpose beyond the specific service they provide to bgp33.

5.2 Game Providers

To facilitate live dealer and virtual games, bgp33 shares limited session-level data with our licensed game providers (including Evolution Gaming and Ezugi). This data is limited to what is necessary to deliver the game and resolve any technical disputes and does not include sensitive financial or document data.

5.3 Regulatory and Legal Authorities

bgp33 may be required by law, court order, or regulatory instruction to disclose your personal data to relevant authorities. In such cases, bgp33 will disclose only the minimum data required to comply with the legal obligation. Where legally permissible, bgp33 will notify you of any such disclosure.

5.4 Business Transfers

In the event that bgp33 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. bgp33 will provide advance notice of any such transfer via the registered email address on your account.

6. Cookies & Tracking Technologies

bgp33 uses cookies, web beacons, and similar tracking technologies to operate and improve the platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without affecting core platform functionality.
• Analytical Cookies: These cookies allow bgp33 to measure how players use the platform — which pages are most visited, how long sessions last, and where players encounter errors. Data collected is aggregated and anonymised wherever possible.
• Functional Cookies: These cookies remember your preferences such as display settings, last-visited game category, and language selection to provide a personalised experience on return visits.
• Security Cookies: These cookies support our fraud detection systems by identifying unusual patterns of device or IP behaviour that may indicate account compromise or fraudulent activity.

You can control and manage cookies through your web browser settings. Disabling cookies may affect the performance and functionality of certain areas of the bgp33 platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7. Data Retention

bgp33 retains your personal data for as long as your account remains active and for a defined period following account closure, in line with the following retention schedule:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from bgp33 systems or irreversibly anonymised so that it can no longer be attributed to any individual player.

8. Security Measures

bgp33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bgp33 platform is encrypted using industry-standard TLS 1.3 protocols.
• AES-256 Encryption at Rest: Sensitive data stored in bgp33 databases, including KYC documents and financial information, is encrypted using AES-256 at rest.
• Access Controls: Access to player data within bgp33 systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for staff, and comprehensive audit logging of all data access events.
• Penetration Testing: bgp33 conducts regular third-party penetration testing and vulnerability assessments of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response: bgp33 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, affected players will be notified promptly with details of the incident and the steps taken to mitigate any harm.
• Staff Training: All bgp33 staff who handle personal data receive regular training on data protection obligations, security best practices, and the correct handling of sensitive player information.

9. Your Data Subject Rights

As a data subject, you have the following rights in relation to the personal data bgp33 holds about you. bgp33 is committed to honouring these rights within a reasonable timeframe, typically within 30 calendar days of receiving a verifiable request.

9.1 Right of Access

You have the right to request a copy of the personal data bgp33 holds about you. This is sometimes called a Subject Access Request (SAR). Upon verification of your identity, bgp33 will provide you with a structured summary of your data in a readable format.

9.2 Right to Rectification

If any personal data bgp33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your details directly through your account dashboard; for data that cannot be self-corrected, please contact [email protected].

9.3 Right to Erasure

Also known as the "right to be forgotten", you may request that bgp33 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis applies), or where processing is unlawful. This right is subject to bgp33's legal retention obligations — data that must be kept for regulatory compliance cannot be deleted until the mandatory retention period has elapsed.

9.4 Right to Data Portability

Where data is processed on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to request that it be transmitted to another data controller where technically feasible.

9.5 Right to Object

You have the right to object to bgp33 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of bgp33's legitimate interests where you believe your rights and freedoms override those interests. bgp33 will assess each objection and cease processing unless compelling legitimate grounds exist.

9.6 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data or have objected to processing while a determination is pending — you may request that bgp33 restrict (but not delete) the processing of your data until the matter is resolved.

To exercise any of the rights listed above, please contact bgp33's data team at [email protected] with the subject line "Data Rights Request". bgp33 will verify your identity before processing any request to ensure that data is not disclosed to or modified by an unauthorised person.

10. Children & Minors

The bgp33 platform is strictly intended for adults aged 21 and above. bgp33 does not knowingly collect, process, or store personal data of individuals under the age of 21. Age verification checks are carried out at the point of registration and during the KYC process specifically to prevent minors from accessing the platform.

If bgp33 discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all balances will be forfeited pending investigation, and any personal data collected will be securely deleted once the matter has been fully investigated and documented for compliance purposes.

If you are a parent or guardian and believe that your child may have registered an account on bgp33, please contact us immediately at [email protected] so that we can take prompt remedial action.

11. International Data Transfers

bgp33 may transfer your personal data to service providers or infrastructure partners located outside Bangladesh, including in jurisdictions that may have different data protection standards. In all cases where international transfers occur, bgp33 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses in data processing agreements that require recipient organisations to meet data protection standards equivalent to those applied by bgp33;
• Use of service providers that maintain internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II);
• Transfer only of the minimum data necessary for the specific service being provided by the overseas recipient.

bgp33 does not transfer personal data to countries or entities that cannot demonstrate an adequate level of data protection relative to the sensitivity of the data being transferred.

12. Third-Party Links & Embedded Content

The bgp33 platform may contain references to or integrations with third-party game providers whose software runs within the bgp33 environment. While bgp33 carefully vets all game providers for security and compliance, please be aware that once you interact with a third-party game client, certain session-level data may be processed by that provider in accordance with their own privacy policy.

bgp33 is not responsible for the privacy practices of third-party game studios or any external service whose content is embedded within the platform. Players are encouraged to review the privacy policies of Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Netent, Microgaming, and any other game studio whose titles they access through bgp33.

13. Changes to This Privacy Policy

bgp33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational procedures, or applicable legal requirements. When material changes are made — for example, changes that affect the categories of data collected, the purposes of processing, or your rights — bgp33 will notify registered players by email to the address associated with their account at least 14 days before the updated policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent version of the Privacy Policy came into effect. Your continued use of the bgp33 platform following the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you must close your account and cease using the platform before the effective date of the changes.

Minor clarifications, typographical corrections, and formatting updates that do not affect the substance of the policy may be made at any time without advance notice. bgp33 recommends that all players review this Privacy Policy periodically to stay informed about how their data is being handled.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bgp33 handles your personal data, please contact our data protection team using the details below. bgp33 is committed to responding to all privacy-related enquiries promptly and transparently.

When submitting a data rights request or privacy enquiry, please include your registered username and the email address associated with your bgp33 account so that we can verify your identity and locate your records promptly. bgp33 will never charge a fee for handling routine privacy enquiries or data subject access requests.