Your Privacy Matters at dc33 — How We Protect Your Personal Data

Who We Are and How to Contact Us

dc33 operates the online betting and casino platform available at https://dc33.asia ("the Platform"). dc33 is the data controller responsible for the personal data of all registered players and website visitors. As data controller, dc33 determines the purposes and means by which your personal data is collected and processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data dc33 holds about you, please contact our support team at any time:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the dc33 platform
• Response Time: Privacy-related enquiries acknowledged within 24 hours; substantive responses provided within 5 business days (Bangladesh Standard Time, UTC+6)

What Personal Data We Collect

dc33 collects personal data in several ways: directly from you when you register an account or interact with our services, automatically through your use of the platform, and in limited cases from third-party verification and payment service providers. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

When you create a dc33 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are aged 21 or above)
• Residential address (including city and district within Bangladesh)
• Valid email address
• Bangladeshi mobile phone number (used for account verification and two-factor authentication)
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations and to protect our players from identity fraud, we may collect and process copies of:

• National Identity Card (NID) or passport
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months)
• Proof of payment method ownership (e.g., a photograph confirming your bKash-registered mobile number)
• Source of funds documentation where enhanced due diligence thresholds are triggered

2.3 Financial and Transaction Data

We collect records of all financial transactions you conduct through dc33, including:

• Deposit amounts, dates, and payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Withdrawal requests, amounts, and processing dates
• Bonus credits issued and wagering activity
• Account balance history

dc33 does not store full card numbers or full mobile wallet credentials. Payment authentication is handled securely by our payment service providers in accordance with applicable security standards.

2.4 Gaming and Betting Activity Data

We collect detailed records of your activity on the dc33 platform, including:

• Games played, bets placed, and outcomes received
• Session start and end times, session duration, and frequency of play
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
• Bonus claims, promotion participation history, and wagering progress

This data is collected both to provide the gaming service and to fulfil our responsible gaming obligations under dc33's Responsible Gaming Policy.

2.5 Technical and Device Data

When you access dc33, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Screen resolution and language settings
• Referring URL and pages visited on dc33
• Session cookies and similar tracking technologies (see Section 7 — Cookies)

2.6 Communications Data

If you contact dc33 via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and our responses. This data is used to resolve your query, improve our service quality, and maintain a record of our interactions with you.

How We Use Your Personal Data

dc33 processes your personal data only where we have a lawful basis for doing so. The following table sets out the primary purposes for which we use your data and the corresponding lawful basis for each purpose.

Marketing Communications

dc33 may send you promotional emails and platform notifications about bonuses, new game launches (including cricket betting markets for BPL and T20 events, new slots from Pragmatic Play and NetEnt, and live casino updates), and seasonal promotions relevant to the Bangladesh market. Marketing communications are sent only where you have provided your consent at registration or have subsequently opted in. You may withdraw your consent at any time by contacting support at [email protected] or by updating your notification preferences in your account settings.

How We Share Your Personal Data

dc33 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Payment Service Providers

To process your deposits and withdrawals, dc33 shares necessary transaction data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These providers receive only the data required to process your specific transaction and are subject to strict contractual data protection obligations.

4.2 Game Technology Providers

dc33's game library includes titles and live casino streams from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, limited session and gameplay data is shared with these providers under the terms of dc33's licensing agreements. These providers do not receive your full identity or financial data.

4.3 Identity Verification Partners

dc33 may use third-party KYC verification service providers to assist with identity document checking and age verification. These providers process your identity data solely to perform the verification check on our behalf and are not permitted to retain or use your data for any other purpose.

4.4 Legal and Regulatory Disclosure

dc33 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. dc33 will endeavour to notify you of any such disclosure where it is legally permissible to do so.

4.5 Business Transfers

In the event that dc33 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. dc33 will provide notice of any such transfer and ensure that appropriate data protection obligations are maintained.

Data Retention

dc33 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, dc33 will securely delete or anonymise your personal data in a manner that prevents recovery. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical analysis purposes, as anonymised data no longer constitutes personal data.

Your Rights Over Your Personal Data

As a dc33 player, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the dc33 support team via live chat or at [email protected]. We will respond to all rights requests within 5 business days.

Please note that certain rights are subject to limitations where dc33 is required to retain or process your data to fulfil legal obligations — for example, AML record-keeping requirements may prevent full erasure of financial transaction records within the mandatory retention period. dc33 will always explain the basis for any limitation on a rights request clearly and in plain English.

Cookies and Tracking Technologies

dc33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, prevent fraud, and analyse how players use our services. The cookies we use fall into the following categories:

Strictly Necessary Cookies

These cookies are essential for the dc33 platform to function. They enable core features such as your login session, account security, and payment processing. These cookies cannot be disabled without preventing you from using the platform. No consent is required for strictly necessary cookies.

Functional Cookies

Functional cookies allow dc33 to remember your preferences — such as your preferred language (English), your responsible gaming settings, and your most recently played games — to provide a more personalised experience. These cookies do not track your activity across other websites.

Analytics Cookies

dc33 uses analytics tools to understand how players navigate the platform, which features are most used, and where technical errors may occur. This data is collected in aggregated, anonymised form and is used solely to improve the dc33 platform. Analytics cookies are activated only with your consent.

Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through your browser settings. Please note that disabling certain categories of cookies may affect the performance and functionality of the dc33 platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

Security Measures

dc33 takes the security of your personal data seriously and implements a layered, defence-in-depth approach to information security. Our technical and organisational security measures include:

• Transport Layer Security: All data transmitted between your device and dc33 servers is encrypted using TLS 1.3, providing industry-standard protection against interception.
• Data Encryption at Rest: All personal data stored on dc33 systems is encrypted using AES-256 encryption, ensuring data remains unreadable in the event of unauthorised physical access to storage media.
• Two-Factor Authentication (2FA): dc33 offers optional 2FA for all player accounts using one-time password (OTP) verification via your registered Bangladeshi mobile number, providing an additional layer of account security.
• Access Controls: Access to personal player data within dc33's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and subject to periodic audit.
• Intrusion Detection: dc33 operates continuous network monitoring and intrusion detection systems to identify and respond to unauthorised access attempts in real time.
• Regular Security Testing: dc33's platform undergoes regular penetration testing and security assessments by qualified information security professionals to identify and remediate vulnerabilities proactively.
• Staff Training: All dc33 personnel who handle personal data receive mandatory data protection and information security training as part of their onboarding and on an annual basis.

While dc33 applies comprehensive security measures, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own dc33 login credentials. If you suspect that your account has been compromised, please contact dc33 support via live chat immediately so we can take appropriate protective action.

Children and Minors

dc33 operates a strict minimum age policy of 21 years. The dc33 platform is not intended for use by any person under the age of 21, and dc33 does not knowingly collect personal data from individuals under this age.

If dc33 becomes aware that a registered player is under 21 years of age, the account will be immediately suspended, all associated personal data will be reviewed, and any deposits made during the underage period will be returned to the original payment method. Any winnings accrued during an underage registration period will be forfeited.

Parents and guardians who believe their child may have accessed dc33 without authorisation are encouraged to contact our support team immediately at [email protected]. dc33 also recommends the use of parental control software to restrict access to online gambling platforms for households with minors.

International Data Transfers

dc33 primarily processes and stores personal data on servers located within or serving the Bangladesh and South Asia region. In limited circumstances — for example, where a third-party game provider or payment processor operates infrastructure outside Bangladesh — your personal data may be transferred to and processed in other countries.

Where such transfers occur, dc33 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards may include contractual data protection clauses (standard contractual clauses) incorporated into our agreements with third-party service providers, or reliance on recognised adequacy decisions where applicable.

If you would like further information about the specific safeguards applied to any international data transfer relevant to your account, please contact us at [email protected].

Third-Party Websites and Links

The dc33 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where you access services provided directly by these third parties, their own privacy policies and data practices will apply to any personal data you provide to them directly.

dc33 is not responsible for the privacy practices of third-party service providers and encourages you to review their respective privacy policies before sharing any personal data with them directly. The inclusion of any third-party service reference on the dc33 platform does not constitute an endorsement of that party's privacy practices.

Changes to This Privacy Policy

dc33 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this policy, we will notify registered players via email and by displaying a prominent notice on the dc33 platform for a period of at least 30 days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent version was published. We encourage you to review this Privacy Policy periodically to stay informed about how dc33 protects your personal data. Your continued use of the dc33 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes.

If you disagree with any changes to this Privacy Policy, you may close your dc33 account by contacting our support team. Account closure requests will be processed in accordance with dc33's account closure procedures as described in the Terms & Conditions.

Governing Language and Jurisdiction

This Privacy Policy is written in English and the English version shall be the authoritative version for all interpretive purposes. In the event of any conflict or inconsistency between the English version and any translation, the English version shall prevail.

This Privacy Policy is governed by and construed in accordance with the laws applicable to dc33's operations. Any disputes arising from or in connection with this Privacy Policy that cannot be resolved through our internal complaints procedure shall be referred to the appropriate legal forum in accordance with dc33's Terms & Conditions.

dc33 is committed to resolving all privacy-related concerns promptly and fairly. If you are dissatisfied with how dc33 has handled your privacy concern after contacting our support team, you may escalate the matter through our formal complaints procedure as described in dc33's Terms & Conditions.