pd33 Privacy
Policy

When you register for and use a pd33 account, we collect personal data across several categories. The specific data we collect depends on how you interact with our platform, which features you use, and the payment methods you choose.

Identity & Contact Data

At the point of registration and during Know Your Customer (KYC) verification, we collect: your full legal name as it appears on your government-issued identification; your date of birth; your residential address (including city, district, and division within Bangladesh); your email address; and your Bangladesh-registered mobile phone number. This data is used to verify that you are an eligible adult player and to prevent duplicate account registrations.

Financial & Payment Data

To process deposits and withdrawals securely, we collect payment method identifiers such as your bKash mobile number, Nagad account reference, Rocket wallet ID, or Upay account details. For bank transfer options (Dutch-Bangla Bank, City Bank, BRAC Bank), we collect your bank account number and branch details. For card payments, we collect the card type (Visa or Mastercard), the last four digits, and the card expiry date. We do not store full card numbers or CVV codes — these are handled exclusively by our PCI-DSS-compliant payment processor.

Account & Activity Data

We automatically record data generated by your use of pd33, including: your username and encrypted password; login timestamps and session durations; device type, operating system, and browser version; IP address and approximate geolocation (city level); game history (titles played, stakes placed, outcomes, bonus usage); deposit and withdrawal transaction records; customer support correspondence; and any responsible gaming settings you configure (deposit limits, time-out periods, self-exclusion requests).

Verification Documents

As part of our KYC process, you may be required to upload scanned copies or photographs of: a government-issued national ID card or passport; a recent utility bill or bank statement as proof of address; and a screenshot of your bKash, Nagad, or other payment account showing your registered name. These documents are stored securely and accessed only by authorised verification staff.

pd33 processes your personal data only for purposes that are lawful, specific, and proportionate. The table below sets out our primary processing activities, the data categories involved, and the legal basis on which each activity rests.

Marketing Communications

If you have opted in to receive promotional communications from pd33, we may contact you by email or push notification about new games, seasonal promotions (such as Eid special offers, Pohela Boishakh bonuses, or BPL cricket promotions), deposit match offers, and VIP programme updates. You may withdraw your consent and unsubscribe from marketing communications at any time by using the unsubscribe link in any email we send, or by contacting our support team.

Automated Decision-Making

pd33 uses automated systems to screen accounts for fraud indicators, unusual betting patterns, and responsible gaming triggers. Where an automated process produces a decision that materially affects your account (for example, a temporary withdrawal hold), you have the right to request human review of that decision. Contact us at [email protected] to exercise this right.

pd33 does not sell your personal data. We share data only in the limited circumstances described below, and only with recipients who are bound by appropriate confidentiality and data protection obligations.

Game Providers & Technology Partners

To deliver our games, we share necessary session and account reference data with certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the minimum data required to authenticate your session and record game outcomes. They are contractually prohibited from using this data for any purpose other than game delivery.

Payment Processors

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and our banking and card partners, we share relevant transaction data with those payment processors. Each processor operates under its own privacy policy and is independently responsible for the security of data within its own systems.

Identity Verification Services

We may use third-party KYC and identity verification services to cross-reference the documents you submit. These services process your data solely for the purpose of verifying your identity and age, and are not permitted to retain or repurpose that data.

Legal & Regulatory Disclosure

pd33 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. We will notify you of such a disclosure to the extent permitted by law and the circumstances of the case.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of pd33's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

pd33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and gather anonymised analytics data that helps us improve the user experience for players across Bangladesh.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, protect against cross-site request forgery (CSRF), and enforce responsible gaming settings. These cookies cannot be disabled without preventing you from using the platform.
• Performance & Analytics Cookies: We use anonymised analytics cookies to understand how players navigate pd33 — which games are most popular, where players encounter friction, and how long sessions last. This data is aggregated and not linked to individual identities.
• Functional Cookies: These cookies remember your preferences, such as your preferred language setting (English), your last-visited game category, and display preferences. They improve your experience without tracking you for advertising purposes.
• Marketing Cookies: With your explicit consent, we may place marketing cookies to track which promotional content led you to pd33, so we can assess the effectiveness of our campaigns. These cookies do not track you across third-party websites unrelated to pd33.

Cookie Retention Periods

Session cookies expire when you close your browser. Persistent cookies are retained for varying periods — typically between 30 days and 12 months — depending on their function. The specific retention period for each cookie category is detailed in our Cookie Settings panel, accessible from your account preferences.

Managing Cookies

You can manage or withdraw consent for non-essential cookies at any time via your browser settings or the Cookie Settings panel within your pd33 account. Please note that disabling performance or functional cookies may affect the quality of your experience on the platform, but will not prevent you from accessing core gaming and account features.

The security of your personal data is a matter pd33 takes seriously. We implement a multi-layered security architecture designed to protect your data against unauthorised access, disclosure, alteration, and destruction.

Technical Safeguards

• Transport Encryption: All data transmitted between your browser or app and pd33's servers is protected by TLS 1.3, the current industry standard for secure web communications.
• At-Rest Encryption: Sensitive personal data stored in our databases is encrypted using AES-256, a military-grade symmetric encryption standard.
• Password Hashing: Account passwords are never stored in plaintext. They are hashed using bcrypt with a sufficiently high cost factor, ensuring that even in the highly unlikely event of a database breach, passwords cannot be reversed.
• Two-Factor Authentication (2FA): We strongly encourage all players to enable 2FA on their pd33 accounts. When enabled, a one-time passcode (OTP) is required in addition to your password at each login, significantly reducing the risk of unauthorised access.
• Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade web application firewalls (WAF) and continuous intrusion detection systems (IDS) that monitor for anomalous access patterns around the clock.

Organisational Safeguards

Access to personal data within pd33 is restricted on a strict need-to-know basis. Staff who require access to personal data for their role undergo data protection training and are bound by confidentiality obligations as a condition of their employment. Access logs are maintained and reviewed regularly.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, pd33 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the categories of data affected, and the steps we have taken or propose to take to address it. We will also take immediate steps to contain the breach, assess its scope, and prevent recurrence.

pd33 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When the applicable retention period expires, data is either securely deleted from our systems or, where deletion is not technically feasible (for example, in encrypted backup archives), isolated from active use and scheduled for deletion at the next practicable opportunity.

If you request account closure, your identifiable personal data will be flagged for deletion in accordance with the schedule above. Data required to fulfil legal obligations (such as financial transaction records) will be retained for the statutory period regardless of the closure request, but will not be used for any active processing purpose during that retention window.

As a pd33 player, you have meaningful rights over your personal data. We are committed to honouring these rights promptly and without creating unnecessary barriers.

Right of Access

You may request a copy of all personal data pd33 holds about you. We will provide this within 30 days of verifying your identity. The information will be provided in a structured, commonly used, machine-readable format (JSON or CSV) where technically feasible.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For most contact and address data, you can update this directly within your account settings. For identity and KYC data, please contact our support team with supporting documentation.

Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw your consent and no other lawful basis applies; or you object to processing based on our legitimate interests and we have no overriding grounds to continue. Please note that we may be required to retain certain data for legal or regulatory compliance purposes even following an erasure request.

Right to Restriction of Processing

You may request that we suspend processing of your personal data in certain circumstances, for example while we investigate the accuracy of data you have disputed or while we assess an objection you have raised.

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that we transmit it directly to another controller where technically feasible.

Right to Object

You have the right to object at any time to processing of your personal data where that processing is based on our legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

Exercising Your Rights

To exercise any of the above rights, contact our privacy team in writing at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and respond substantively within 30 days. We may need to verify your identity before processing any request — this is to protect you and to ensure that data is not disclosed or altered at the request of an unauthorised party.

pd33 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, and feedback from our players. Where a change is material — meaning it significantly affects how your personal data is used or the rights available to you — we will notify you by email to your registered address and by a prominent notice on the pd33 platform no less than 14 days before the change takes effect.

Changes of a minor or administrative nature (such as correcting a typographical error or clarifying existing language without changing its substance) may be made without advance notice. The "Effective Date" at the top of this policy will always reflect the date of the most recent substantive revision.

Your continued use of pd33 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with a material change, you should close your account before the change takes effect and contact us to exercise your data rights as described in Section 07 above.

Children's Privacy

pd33 is strictly an adults-only platform. We do not knowingly collect, store, or process personal data from individuals under the age of 18. Our registration process includes date-of-birth verification, and we conduct age checks as part of our KYC process. If you are a parent or guardian and believe that your child has registered a pd33 account without your knowledge, please contact us immediately so we can close the account and delete all associated data without delay.

Contact Our Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how pd33 handles your personal data, our privacy team is available to assist:

• Email: [email protected] (subject: "Privacy Enquiry")
• Live Chat: Available 24/7 via your pd33 account dashboard
• Response Time: Initial acknowledgement within 5 business days; substantive response within 30 days