bad33 Privacy Policy
We are committed to protecting your personal data. This policy explains what information bad33 collects when you use the platform, how it is used, and the choices you have regarding your data.
Last updated: 2026
Overview and Scope
bad33 operates as an online betting and casino platform serving players in Bangladesh. We process personal data that you provide directly to us — such as when you register, deposit, or contact support — as well as data collected automatically when you browse or play on the platform. We treat all personal data with the highest level of care and do not sell your data to third parties under any circumstances.
This policy is written in plain language so that it is easy to understand. If you have questions about how bad33 handles your data, you may contact us at any time using the details provided in the Contact section below. We review this policy periodically and will notify you of material changes via the platform or by email.
SSL Encrypted
All data transmission is protected with 256-bit SSL
No Data Sales
Your personal data is never sold to any third party
Your Rights
Access, correct, or request deletion of your data
Cookies
Essential and analytics cookies used to improve your experience
Data Transfers
Data may be processed by vetted international service providers
Contact Us
Privacy enquiries: [email protected]
1. Information We Collect
bad33 collects personal data through several means. The categories of data we collect are set out below. We collect only the data that is necessary for the purposes described in this policy.
Registration Data
When you create an account with bad33, we collect your name, date of birth, mobile phone number, and any other information you provide during the registration process. This data is required to create and manage your account, verify your eligibility (including age verification), and comply with anti-money laundering (AML) obligations.
Financial Data
We collect data relating to deposits and withdrawals made through your account, including the payment method used (such as bKash, Nagad, or Rocket), transaction amounts in Bangladeshi Taka, and timestamps. We do not store full mobile wallet credentials — all payment processing is handled by the respective payment service providers under their own security protocols.
Usage Data
When you access and use bad33, we automatically collect technical and behavioural data including your IP address, device type and operating system, browser type and version, pages visited, games played, bet amounts, session duration, and clickstream data. This information is used to improve platform performance, personalise your experience, and detect fraud.
Communications Data
If you contact bad33 customer support, we retain records of those communications — including the content of messages, timestamps, and the outcome of any support request. This data is used to resolve your query, improve our support service, and maintain a record of interactions for dispute resolution purposes.
2. How We Use Your Information
bad33 processes personal data for specific, legitimate purposes. The table below maps each processing purpose to the data categories used and the legal basis for that processing.
| Purpose | Data Used |
|---|---|
| Account registration and management | Registration data, financial data |
| Processing deposits and withdrawals | Financial data, registration data |
| Fraud detection and AML compliance | Usage data, financial data, registration data |
| Customer support | Communications data, registration data |
| Platform improvement and analytics | Usage data (aggregated and anonymised where possible) |
3. Legal Basis for Processing
bad33 processes your personal data only where a valid legal basis exists. The primary bases on which we rely are set out below.
Contractual Necessity
The majority of the personal data we process — including registration data and financial transaction data — is processed because it is necessary to perform the contract between you and bad33. Without this data, we cannot create or maintain your account, process your deposits or withdrawals, or provide you with access to the platform's products and services.
Legal Obligation
Certain processing activities are required by law, including Know Your Customer (KYC) identity verification, age verification, anti-money laundering screening, and transaction record-keeping. bad33 is required to retain financial and identity records for a defined period to comply with applicable regulatory obligations.
Legitimate Interests
Where it does not override your own rights and interests, bad33 may process usage data and communications data on the basis of our legitimate interests, including fraud detection, platform security, analytics to improve service quality, and resolving disputes. We apply a proportionality test before relying on this basis to ensure the processing does not unduly affect your privacy.
4. Sharing Your Information
bad33 does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processors
To process deposits and withdrawals, bad33 shares necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, and Upay. These providers operate under their own privacy policies and security standards. bad33 only transmits the minimum data required to authorise and complete each transaction.
Game and Technology Providers
bad33 partners with third-party game providers including Pragmatic Play and Evolution Gaming to deliver casino and sports betting products. These providers may receive anonymised or pseudonymised session and gameplay data to ensure game integrity, calculate RTP, and resolve disputes. No personally identifiable information beyond what is operationally necessary is shared with game providers.
Legal and Regulatory Authorities
bad33 may be required by law, court order, or regulatory instruction to disclose personal data to relevant authorities. This includes disclosures required for AML investigations, fraud investigations, and compliance with applicable law. bad33 will only disclose the minimum information required to satisfy a legally valid request and, where permitted, will notify the affected player.
5. Cookies and Tracking Technologies
bad33 uses cookies and similar technologies to operate the platform, remember your preferences, and analyse how the platform is used. Cookies are small text files stored on your device by your browser when you visit bad33.vip.
Essential Cookies
Essential cookies are required for the platform to function. They include session cookies that keep you logged in during an active session, security cookies that protect against cross-site request forgery, and cookies that remember your language preference. Essential cookies cannot be disabled without breaking core platform functionality.
Analytics Cookies
bad33 uses analytics cookies to collect aggregated, anonymised data about how players navigate and use the platform. This data helps us identify areas for improvement, optimise page performance, and understand which features players find most valuable. Analytics data does not identify individual users and is not linked back to your personal account.
6. Data Retention
bad33 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Account data and financial transaction records are retained for a minimum of five years following account closure to comply with AML regulatory requirements. Usage data and session logs may be retained for shorter periods.
When personal data is no longer required, bad33 will securely delete or anonymise it. Where deletion is not immediately possible due to backup retention schedules, the data will be isolated and protected from further processing until deletion can be completed.
7. Data Security
bad33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL encryption on all data in transit, encrypted storage of sensitive account data, access controls limiting data access to authorised personnel only, and regular security testing.
While bad33 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bad33 will notify affected players and take immediate remedial action in accordance with our incident response procedures.
8. Your Data Rights
You have rights in relation to the personal data bad33 holds about you. To exercise any of the rights below, contact us at [email protected]. bad33 will respond to verified requests within a reasonable period and at no charge.
Right of Access
You have the right to request a copy of the personal data bad33 holds about you, together with information about how that data is being processed. We will provide this information in a clear, accessible format within a reasonable period of receiving your verified request.
Right to Rectification
If the personal data bad33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update certain account information directly via your account settings dashboard without needing to contact us.
Right to Erasure
In certain circumstances you may request that bad33 delete the personal data it holds about you. This right is not absolute — bad33 may be required to retain certain data by law (for example, financial records for AML compliance). Where erasure is possible, bad33 will action the request promptly and confirm completion.
Right to Object
Where bad33 processes your data on the basis of legitimate interests, you have the right to object to that processing. If you object, bad33 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
9. Third-Party Links
bad33 does not include links to third-party websites in its platform content. All navigation within bad33.vip remains internal to the platform. This policy does not apply to any external website that may be accessed via a search engine result, referral, or any means other than direct navigation through bad33.vip. bad33 is not responsible for the privacy practices of any third-party website.
10. Children and Minors
bad33 is strictly intended for adults aged 21 and above. The platform does not knowingly collect personal data from individuals under the age of 21. If bad33 becomes aware that a registered account belongs to a person under 21, that account will be suspended immediately, all transactions will be reviewed, and the personal data associated with the account will be handled in accordance with our age verification and responsible gaming policies. If you believe a minor has registered an account on bad33, contact us immediately at [email protected].
11. Changes to This Privacy Policy
bad33 reviews this Privacy Policy periodically and may update it to reflect changes in the way we process data, changes in applicable law, or improvements to our services. Where we make a material change to this policy, we will notify registered players via the platform or by the email address on their account before the change takes effect. The most current version of this policy is always available at bad33.vip/privacy-policy. Continued use of the platform after notification of a change constitutes acceptance of the revised policy.
12. Contact and Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bad33 handles your personal data, please contact our support team. All privacy-related enquiries are handled by our data team and will receive a response within a reasonable timeframe.
Privacy contact: [email protected] — We aim to respond to all privacy enquiries within 5 business days.