bp333 Privacy Policy — How We Protect Your Data

bp333 ("the Platform", "We", "Us", or "Our") is an internationally licensed online betting and casino platform serving registered players in Bangladesh. We operate at bp333.io and are committed to maintaining the highest standards of personal data protection for every user who interacts with our platform.

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data in connection with your use of bp333. It applies to all current and former registered players, as well as visitors who browse bp333.io without creating an account. By accessing or using bp333 in any capacity, you acknowledge that you have read, understood, and agreed to the practices described in this policy.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your overall agreement with bp333. Where any conflict arises between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall take precedence.

bp333 collects personal data across several categories depending on how you interact with the platform. The table below provides a structured overview of the categories of personal data we may hold about you:

We do not collect data that is not necessary for the purposes described in this policy. If we introduce a new data collection activity in the future, we will update this policy and notify registered players accordingly before the new activity commences.

bp333 collects personal data through the following channels:

• Direct Input: Data you actively provide when registering an account, completing your player profile, submitting KYC documents, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically via cookies, session tokens, log files, and similar technologies each time you visit bp333.io — including your IP address, device identifiers, and browsing behaviour within the platform.
• Payment Processors: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider shares a confirmation payload with bp333 to verify the transaction. This payload typically includes a masked wallet or card reference and the transaction amount in BDT — never your full payment credentials.
• Identity Verification Partners: Where automated KYC tools are used to cross-reference the documents you submit, our verification partners may return a data summary (e.g., confirmed name match, confirmed date of birth) to bp333. We do not receive raw document images from third-party verifiers beyond what you directly upload.
• Third-Party Game Studios: Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may pass game session metadata (round IDs, bet amounts, outcomes) to bp333's platform in real time to populate your account history. This data originates from your in-game actions.

bp333 processes your personal data only for specific, legitimate purposes. We do not process data speculatively or in ways that are incompatible with the purposes listed below:

• Account Management: Creating, maintaining, and securing your registered bp333 player account throughout your relationship with the platform.
• Identity & Age Verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment methods are legitimately yours. This is both a legal obligation and a player protection measure.
• Payment Processing: Enabling fast, accurate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Reconciling transaction records for your account statement.
• Platform Operations & Personalisation: Delivering the sports betting, live casino, slots, and instant game services you use; personalising your experience based on game preferences and platform history where you have not opted out.
• Responsible Gaming Compliance: Monitoring for signs of problem gambling behaviour, applying self-imposed limits you have set, and intervening proactively where our tools flag potential harm. This is a fundamental player welfare obligation.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Anti-Money Laundering (AML) & Legal Compliance: Meeting our obligations under applicable AML regulations, including transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Customer Support: Responding to your enquiries, resolving disputes, processing formal complaints, and maintaining a service history to support ongoing assistance.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal approvals, security alerts), and where you have consented, promotional communications about offers and new features on bp333.
• Analytics & Platform Improvement: Using aggregated, anonymised or pseudonymised data to understand how players use the platform and to improve features, performance, and user experience.

bp333 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and bp333 — i.e., operating your account, processing your bets, and handling your payments. Without this data, we cannot provide the service.
• Legal Obligation: Processing required for bp333 to comply with applicable legal requirements, including KYC, AML, and record-keeping obligations.
• Legitimate Interests: Processing necessary for bp333's legitimate operational interests where these are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and service quality analytics.
• Consent: Where processing is based on your explicit consent — for example, opting in to receive promotional emails or SMS about bp333 offers. You may withdraw consent at any time via your account notification settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

bp333 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other payment partners receive only the minimum data necessary to process your transaction (e.g., wallet reference, transaction amount in BDT). These providers are contractually bound to use your data solely for payment processing.
• Identity Verification Partners: Where automated KYC tools are used to validate documents submitted during account registration or withdrawal processing. Verification partners operate under strict data processing agreements and are prohibited from retaining or repurposing your identity documents.
• Game Studios: Third-party game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) receive a session token and player alias sufficient to launch and manage your game session. They do not receive your full identity or financial data.
• IT & Hosting Infrastructure: Cloud hosting and infrastructure providers who store platform data on secured servers on behalf of bp333. These providers act as data processors under our instruction and are contractually prohibited from accessing your data for any purpose other than the infrastructure services they provide.
• Legal & Regulatory Authorities: Where required by law, court order, or a legitimate regulatory request, bp333 will disclose the minimum personal data necessary to comply. We will notify you of any such disclosure where we are legally permitted to do so.
• Fraud Prevention & AML Networks: Where our AML or fraud prevention obligations require information sharing with cross-industry databases or law enforcement bodies, we will do so in accordance with applicable legal requirements.

bp333 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The following retention principles apply:

• Active Accounts: Personal data associated with an active player account is retained for the full duration of the account relationship and for a minimum of 5 years after the account is closed, in compliance with AML record-keeping requirements.
• Transaction Records: Financial transaction records — including deposit and withdrawal history denominated in BDT — are retained for a minimum of 7 years to satisfy applicable financial record-keeping obligations.
• KYC Documents: Identity verification documents (National ID, passport copies, etc.) are retained for a minimum of 5 years from the date of submission. Where a document is superseded by a newer version, the older version is securely deleted within 30 days of the new document being accepted.
• Support Communications: Customer support chat transcripts, email correspondence, and formal complaints are retained for 3 years from the date of last interaction, to support ongoing dispute resolution and service improvement.
• Marketing Data: Where processing is based on your consent for marketing communications, your consent record and associated contact data are retained for 2 years from the date of last interaction or until consent is withdrawn, whichever comes first.
• Technical & Behavioural Logs: Server access logs and session-level behavioural data are retained for a maximum of 12 months in identifiable form, after which they are either deleted or anonymised for aggregate analytics purposes.

When retention periods expire, personal data is securely deleted or anonymised using industry-standard data destruction procedures. bp333 conducts a periodic data audit — at minimum annually — to ensure retention schedules are being followed and that unnecessary data is not being held.

bp333 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL Encryption: All data transmitted between your browser or mobile device and bp333.io is protected using 256-bit SSL/TLS encryption. This applies to every interaction — login, registration, deposit, withdrawal, and gameplay.
• Encryption at Rest: Sensitive personal data, including identity documents and financial details, is encrypted at rest using AES-256 encryption within our database infrastructure.
• Two-Factor Authentication (2FA): All player accounts support SMS-based 2FA. bp333 strongly recommends enabling 2FA immediately after registration. Staff accounts with access to player data are required to use 2FA.
• Access Controls: Personal data is accessible only to bp333 staff and contractors on a strict need-to-know basis. Role-based access control (RBAC) is enforced across all internal systems. All staff access is logged and auditable.
• Penetration Testing: bp333's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bp333 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable regulations.

bp333 uses cookies and similar tracking technologies to deliver and improve our services. A cookie is a small text file placed on your device when you visit bp333.io. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies (CSRF protection), and load-balancing cookies. These cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience on return visits.
• Analytics Cookies: Collect anonymised or pseudonymised data about how visitors interact with bp333.io — pages visited, session duration, navigation paths. This data is used exclusively to improve platform design and performance.
• Security & Fraud Prevention Cookies: Support our fraud detection systems by recording device fingerprint signals and identifying unusual access patterns that may indicate account compromise or automated abuse.

bp333 does not use third-party advertising or retargeting cookies. We do not deploy tracking pixels from social media platforms or advertising networks on any bp333.io page.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling analytics or functional cookies will not prevent you from using bp333 but may reduce the quality of your personalised experience.

As a bp333 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]":

• Right of Access: You may request a copy of all personal data bp333 holds about you. We will provide this within 30 days of a verified request, in a structured and readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account details (such as mobile number or email) can typically be updated directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you have withdrawn consent and no other legal basis applies. Note that this right is subject to our legal obligations — data required for AML compliance and financial record-keeping cannot be deleted before its mandatory retention period expires.
• Right to Restriction: You may request that bp333 restricts processing of your personal data in certain circumstances — for example, while the accuracy of a disputed data point is under investigation.
• Right to Data Portability: You may request a machine-readable export of personal data you have provided to bp333 (e.g., account details, transaction history). This right applies to data processed on the basis of consent or contractual necessity.
• Right to Object: You may object to processing of your personal data where it is based on bp333's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

bp333 operates as an internationally licensed platform. As a result, personal data collected from Bangladesh-based players may be processed or stored on infrastructure located outside Bangladesh. This may occur in the context of our cloud hosting arrangements, third-party game studio integrations, or KYC verification services.

Where personal data is transferred internationally, bp333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded by this Privacy Policy. These safeguards include:

• Contractual data processing agreements with all third-party processors, incorporating data protection obligations consistent with internationally recognised standards.
• Use of infrastructure providers that maintain compliance with recognised security certifications (e.g., ISO 27001, SOC 2 Type II) at their data centre facilities.
• Limiting cross-border data sharing to the minimum data necessary for the specific processing activity, with no bulk data transfers to jurisdictions lacking adequate data protection frameworks.

If you would like further details about the specific transfer mechanisms applicable to your personal data, please contact our support team at [email protected].

bp333 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. All registration processes include an age declaration, and KYC verification is used to confirm that players meet the 21+ requirement before withdrawal capabilities are activated.

If bp333 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data collected, and return any deposited funds to the original payment source following an investigation.

Parents and guardians of minors are encouraged to install parental control or content filtering software on shared devices to prevent underage individuals from accessing bp333.io or any other online gambling platform. bp333 supports responsible digital parenting and takes underage gambling prevention with the utmost seriousness.

bp333 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they affect how we collect, use, or share your personal data in ways that could impact your rights — we will provide at least 7 calendar days' advance notice via a prominent notice on bp333.io and/or by email to your registered address.

Minor updates (such as clarifications of existing practices, corrections of typographical errors, or administrative amendments that do not affect your rights) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of bp333 after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any change, you must cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or how bp333 handles your personal data, please contact our support and data protection team through any of the following channels:

• Email: [email protected] — for data rights requests, use subject line: "Data Rights Request — [Username]"
• Live Chat: Available 24/7 directly within the bp333 platform. Average response time: under 90 seconds.
• WhatsApp: +880 1700 000 333

All privacy-related enquiries will be acknowledged within 5 working days and addressed substantively within 30 calendar days of receipt.