bga33 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how bga33 ("we", "us", "our") collects, processes, stores, and protects personal information provided by users ("you", "Player") of the bga33 website at https://bga33.app and its associated mobile-optimised platform. This Policy applies to all players accessing the platform from Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other cities and regions.

By registering an account and using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register an account or use the bga33 Services.

Your Privacy at a Glance

2. Information We Collect

bga33 collects personal data only to the extent necessary to provide a safe, reliable, and legally compliant gambling service. We collect information in three main ways: directly from you during registration and account use, automatically when you interact with the platform, and from third parties such as payment providers for fraud prevention and KYC compliance.

Information You Provide Directly

When you register an account or interact with bga33 support, we collect: full legal name; date of birth (to verify the 21+ age requirement); Bangladeshi mobile number used for OTP verification; a chosen username and password (stored in encrypted form); email address if provided; KYC documents such as your Bangladesh National Identity Card (NID), passport, or driving licence when verification is required; correspondence you send to us including support chat transcripts and email exchanges.

Information Collected Automatically

When you use the bga33 platform, we automatically collect: IP address and approximate geolocation (country and city level); device type, operating system, and browser information; session data including login timestamps, session duration, pages visited, and features used; transaction records covering all deposits, withdrawals, bets placed, games played, and bonus activity; clickstream data showing how you navigate the platform. This technical data is used for security monitoring, fraud detection, responsible gaming controls, and platform performance optimisation.

Information from Third Parties

bga33 may receive limited personal information from third-party payment providers — including bKash, Nagad, Rocket, and Upay — in order to verify the identity of the account holder making a deposit or withdrawal, to prevent money laundering, and to resolve transaction disputes. We may also receive fraud-alert data from security and identity verification partners. In all cases, third-party data sharing is limited to what is strictly necessary for the stated purpose.

3. How We Use Your Information

The table below summarises the primary purposes for which bga33 processes your personal data and the corresponding legal basis for each processing activity.

4. Legal Basis for Processing

bga33 processes your personal data only when there is a valid legal basis to do so. The three primary legal bases we rely on are described below.

5. Sharing Your Data

bga33 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Payment Providers

To process your deposits and withdrawals, bga33 shares the necessary transaction and identity information with payment processors including bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own privacy policy and data protection obligations. bga33 shares only the minimum data required to complete the transaction and comply with AML regulations.

Game Providers

Some games on the bga33 platform are provided by third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming. When you play a live casino or slot game provided by a third party, limited session data (such as a player token, bet amount, and game outcome) may be transmitted to the game provider's servers to operate the game. Game providers are contractually prohibited from using this data for any purpose other than delivering the game session.

Legal and Regulatory Disclosures

bga33 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of bga33, its players, or the public. We will notify you of such disclosures where legally permitted to do so.

6. Cookies & Tracking Technologies

bga33 uses cookies and similar tracking technologies to operate the platform and improve your experience. A cookie is a small text file stored on your device when you visit a website. bga33 uses the following types of cookies: strictly necessary cookies (required to keep you logged in and secure your session — these cannot be disabled); functional cookies (remember your preferences such as language and display settings); analytics cookies (help us understand how players use the platform so we can improve performance and fix errors); security cookies (detect and prevent fraudulent activity and protect player accounts).

bga33 does not use advertising cookies, tracking pixels for third-party ad networks, or any technology designed to follow you across other websites. Non-essential cookies are used solely within the bga33 platform. You may manage cookie preferences through your mobile browser settings; however, disabling strictly necessary cookies will prevent the platform from functioning correctly.

7. Data Retention

bga33 retains your personal data for as long as your account remains active and for a minimum period thereafter as required by applicable law and our internal data governance policy. Specifically: account registration data and KYC documents are retained for a minimum of 5 years following account closure to satisfy AML record-keeping requirements; transaction records including deposit and withdrawal history are retained for a minimum of 5 years; responsible gaming records including self-exclusion requests and deposit limit histories are retained for a minimum of 5 years; support correspondence is retained for 2 years; analytics data is anonymised after 12 months.

When the applicable retention period has elapsed and there is no overriding legal reason to keep the data, bga33 will securely delete or irreversibly anonymise your personal information. If you have requested account closure and erasure, we will confirm in writing when the deletion process is complete, subject to the mandatory AML retention periods described above.

8. Security Measures

bga33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include: SSL/TLS encryption for all data transmitted between your device and bga33 servers; encrypted storage of passwords and sensitive credentials using modern hashing algorithms; role-based access controls ensuring that bga33 staff can access personal data only to the extent their role requires; regular security audits and penetration testing of the platform; secure data centres with physical access controls; and real-time fraud and anomaly detection systems that monitor for suspicious account activity.

While bga33 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bga33 will notify affected players without undue delay and will take immediate remedial action. If you suspect that your bga33 account has been compromised, contact [email protected] immediately.

9. Your Privacy Rights

As a bga33 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

• 👁️

  Right of Access

  You have the right to request a copy of all personal data bga33 holds about you, together with information about how it is being processed.

• ✏️

  Right to Rectification

  You have the right to request correction of inaccurate or incomplete personal data that bga33 holds about you. Some account information can be updated directly from your account settings.

• 🗑️

  Right to Erasure

  You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to legal retention obligations — bga33 cannot delete AML-required records before the mandatory minimum retention period expires.

• ⏸️

  Right to Restrict Processing

  You have the right to request that bga33 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interest.

• 📦

  Right to Data Portability

  You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that bga33 transmit it directly to another service provider where technically feasible.

• 🚫

  Right to Object

  You have the right to object to processing of your personal data carried out on the basis of legitimate interest. You also have the absolute right to opt out of direct marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

bga33 will not charge a fee for handling your privacy rights requests and will not discriminate against you for exercising your rights. If we are unable to fulfil your request — for example, because a legal retention obligation applies — we will explain the reason in writing.

10. Children's Privacy

The bga33 platform is strictly prohibited for use by individuals under 21 years of age. bga33 does not knowingly collect personal data from persons under 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. Parents and guardians who believe a minor may have registered a bga33 account should contact [email protected] immediately so that we can investigate and take appropriate action.

11. Third-Party Links

The bga33 platform does not contain links to third-party websites. All content and navigation within bga33 remains within the bga33.app domain. bga33 is not responsible for the privacy practices of any external website that you may access independently. We encourage you to review the privacy policy of any website you visit outside of bga33.

12. Changes to This Policy

bga33 may update this Privacy Policy from time to time to reflect changes in our data practices, the Services we offer, or applicable law. When a material change is made, we will notify registered players by email or by a prominent notice on the bga33 platform at least 7 days before the change takes effect, unless we are required to implement the change immediately by law.

Your continued use of the bga33 platform after an updated Policy is published constitutes your acceptance of the changes. The current version of this Policy is always accessible at https://bga33.app/privacy-policy and is identified by the Last Updated date at the top of this page.

13. Contact & Data Enquiries

For all privacy-related enquiries, rights requests, or data protection concerns, please contact the bga33 support team. Our team handles privacy matters 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6). We aim to acknowledge all privacy requests within 24 hours and to provide a full response within 30 days.

Email: [email protected] — displayed as plain text only, not a clickable link. Please include "Privacy Rights Request" in the subject line of your email for faster routing to our data protection team.