dg33 Privacy Policy — Your Data, Our Responsibility

1 Information We Collect

When you register, use, or interact with the dg33 platform, we collect the following categories of personal data:

Registration and Identity Data

• Full legal name
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Gender (optional, provided voluntarily)
• National Identity Card (NID) number or passport number, where required for KYC verification
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

Contact Data

• Mobile phone number (used for OTP verification and account communications)
• Email address

Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet account numbers (partial, used for transaction matching — full wallet credentials are never stored by dg33)
• Bank account or card details where provided for bank transfer withdrawals (stored in encrypted form)
• Account balance history and betting/gaming transaction history

Technical and Usage Data

• IP address and approximate geographic location at the time of login or registration
• Device type, operating system, browser type and version
• Session duration, pages visited, features used, and in-platform navigation patterns
• Login timestamps and account activity logs

Communications Data

• Records of live chat conversations with dg33 support agents
• Emails or messages sent to or received from dg33 support
• Complaint and dispute records

2 How We Collect Your Information

dg33 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate the dg33 platform. This includes IP address collection, session data, and device fingerprinting for security purposes.
• From payment service providers — transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other payment partners is received by dg33 to confirm and reconcile deposit and withdrawal transactions.
• From identity verification partners — where dg33 uses a third-party KYC verification service, that service provider may return verification status and document authenticity information to dg33.
• From game providers — game session data, round outcomes, and RTP information are logged by third-party game providers such as Pragmatic Play, Evolution Gaming, Microgaming, Ezugi, and Spribe and shared with dg33 for account reconciliation and dispute resolution purposes.

3 How We Use Your Information

dg33 uses the personal data we collect for the following purposes:

4 Legal Basis for Processing

dg33 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is required to fulfil the contract between you and dg33 — specifically, to operate your account, process transactions, and deliver the betting and gaming services you have requested.
• Legal obligation: dg33 is required to collect and retain certain data to comply with applicable anti-money laundering (AML) regulations, age verification requirements, and record-keeping obligations.
• Legitimate interests: dg33 processes certain technical and usage data on the basis of its legitimate interests in maintaining the security and integrity of the platform, detecting and preventing fraud, and improving service quality. These interests do not override your fundamental privacy rights.
• Consent: Where dg33 sends marketing communications, the processing is based on your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Information with Third Parties

dg33 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: Transaction data is shared with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) solely for the purpose of processing your deposit or withdrawal. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
• Game providers: Your username and session data are shared with third-party game providers (Pragmatic Play, Evolution Gaming, Microgaming, Ezugi, Spribe, NetEnt) to facilitate gameplay and round reconciliation. These providers are bound by data processing agreements with dg33.
• Identity verification providers: Where KYC verification is processed by a specialist third-party service, your identity documents and personal details are shared with that provider solely for verification purposes.
• Fraud prevention services: dg33 may share device and behavioural data with fraud detection service providers to identify and prevent abuse of the platform.
• Legal authorities: dg33 will disclose personal data to law enforcement or regulatory authorities where required to do so by applicable law, court order, or regulatory direction. dg33 will only disclose the minimum data necessary to comply with such requests.

6 Cookies and Tracking Technologies

dg33 uses cookies and similar technologies to enhance your experience on the platform and to support security and analytics functions. The following categories of cookies are used:

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated data about how players navigate and use the dg33 platform. This information helps us identify areas for improvement and understand which features are most valued by players.
• Fraud prevention cookies: Used to detect suspicious patterns such as multiple accounts being operated from the same device, automated bot activity, or unusual login behaviour.
• Preference cookies: Used to remember your language or display preferences across sessions.

You may control cookie settings through your browser preferences. Disabling non-essential cookies may limit some personalisation features but will not prevent you from accessing the core dg33 platform.

7 Data Retention

dg33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active account data: Retained for the full duration of your account being active on the dg33 platform.
• Account closure data: Following account closure, dg33 retains identity and transaction records for a minimum of 5 years to comply with AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for 5 years following account closure or the conclusion of any investigation or dispute to which the documents are relevant.
• Support communications: Retained for 3 years following the resolution of the support interaction, or longer if the communication is relevant to an ongoing or unresolved dispute.
• Marketing consent records: Retained for the duration of your consent and for 3 years following withdrawal of consent as proof of compliance.

Where retention beyond these periods is required by applicable law or by an ongoing regulatory, legal, or fraud investigation, data will be retained until that requirement is satisfied. Data that is no longer required and is not subject to any retention obligation will be securely deleted or anonymised.

8 Data Security

dg33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the dg33 platform.
• Encryption at rest for sensitive data fields including payment details and identity document images stored on dg33 servers.
• Access controls limiting internal access to personal data to authorised personnel with a documented need-to-access, enforced through role-based permissions.
• Two-factor authentication (2FA) available for player accounts and enforced for all administrative access to dg33 internal systems.
• Regular security audits and penetration testing conducted by independent security professionals.
• Intrusion detection systems monitoring for anomalous activity on dg33 infrastructure.
• Incident response procedures to detect, contain, and report data security incidents in a timely manner.

9 Your Rights Over Your Personal Data

As a dg33 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the dg33 support team using the details in Section 14.

• Right of access: You may request a copy of the personal data dg33 holds about you, including the categories of data, how it is used, and who it has been shared with.
• Right to rectification: If any personal data dg33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dg33's legal retention obligations (see Section 7).
• Right to restrict processing: You may request that dg33 restricts processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that dg33 provides your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
• Right to object: You may object to processing carried out on the basis of dg33's legitimate interests where you believe your own interests, rights, or freedoms override those legitimate interests.

dg33 will respond to all valid data rights requests within 30 days. Where a request is complex or numerous, dg33 may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

10 Children and Age Verification

The dg33 platform is strictly for adults aged 21 and above. dg33 does not knowingly collect personal data from individuals under the age of 21, and access to betting and gaming services is categorically prohibited for minors.

As part of the registration process, dg33 collects date of birth information from all players and conducts age verification checks. Where there is reasonable doubt about a player's age, dg33 will require the player to submit a valid identity document (NID, passport, or birth certificate) confirming they are 21 or older before any account activity — including deposits, withdrawals, or gameplay — is permitted.

If dg33 discovers that an account has been opened by a person under the age of 21, the account will be immediately closed, all funds held will be returned to the payment method used for deposit (excluding any winnings from gaming activity, which will be forfeited), and dg33 will securely delete all personal data associated with that account.

11 Payment Data and Financial Information

dg33 processes financial information solely for the purpose of facilitating deposits and withdrawals. The following specific practices apply to payment data:

• dg33 does not store full card numbers, CVV codes, or mobile banking PINs. Card and wallet data is tokenised and processed through compliant payment gateways.
• bKash and Nagad transactions are processed through the official merchant APIs of those providers. dg33 receives only a transaction reference number and confirmation status — not your full wallet credentials.
• All deposit and withdrawal records are maintained in encrypted form and are accessible only to authorised personnel for the purposes of transaction reconciliation, fraud review, or dispute resolution.
• dg33 is required to conduct enhanced due diligence on large transactions. For withdrawals of ৳50,000 or above, dg33 may request supporting documentation such as proof of the source of funds.
• Financial transaction records are retained for a minimum of 5 years in accordance with AML compliance obligations.

12 Marketing Communications

dg33 may send promotional communications — including information about new games, seasonal offers, BPL and IPL cricket promotions, deposit bonuses, and platform updates — to players who have explicitly opted in to receiving such communications.

• Marketing messages are sent via SMS to your registered mobile number and/or via email to your registered email address.
• dg33 does not send unsolicited marketing messages (spam) to players who have not opted in.
• You may opt out of marketing communications at any time by contacting dg33 support via live chat or by emailing the support address. Opt-out requests are processed within 5 business days. You will continue to receive transactional communications (deposit confirmations, withdrawal updates, security alerts) regardless of your marketing preference, as these are necessary for the operation of your account.
• dg33 does not share your contact information with any third-party marketing provider or advertiser.

13 Changes to This Privacy Policy

dg33 reserves the right to update or amend this Privacy Policy at any time. The most current version of the Privacy Policy is always available on the dg33 website at dg33.io/privacy-policy, and the effective date at the top of this document will be updated to reflect when the most recent revision was made.

Where changes to the Privacy Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — dg33 will notify registered players via the email address or mobile number on their account prior to the changes taking effect. For non-material updates (such as clarifications or formatting changes), dg33 may update the policy without individual notification.

Your continued use of the dg33 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should close your account and cease using the platform.

14 Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or want to report a potential data security concern, please contact dg33 using the following details:

• Live Chat: Available 24 hours a day, 7 days a week directly on the dg33 platform — the fastest way to reach the support team.
• Email: [email protected] — for formal data rights requests, please include your registered name, registered mobile number, and a clear description of your request.
• Response Time: dg33 targets a response to all data-related enquiries within 5 business days and will fulfil valid data rights requests within 30 days as required.
• Operating Hours: Bangladesh Standard Time (BST, UTC+6), 24/7.