bl33 Privacy Policy

1. Introduction

bl33 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses or uses the bl33 platform, including the website, mobile interface, live casino, sports betting services, and all associated digital features. This Privacy Policy sets out in full the types of personal data we collect, the purposes for which that data is used, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject.

This policy applies to all current and former bl33 account holders, individuals who have begun but not completed the registration process, and any visitor who interacts with the bl33 website in a way that results in personal data being submitted or automatically collected. By accessing the bl33 platform or submitting any personal data through it, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is to be read alongside the bl33 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and another document, this Privacy Policy governs in relation to data protection matters.

2. Data We Collect

bl33 collects personal data in two broad categories: data you provide directly to us, and data collected automatically as you interact with the platform.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, nationality, and gender (collected at registration and during KYC verification).
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode).
• Government-issued identification: National ID card number, passport number, or driving licence number and a copy of the relevant document, submitted during KYC verification.
• Financial data: bKash account number, Nagad account number, Rocket (Dutch-Bangla Bank) account number, Upay account number, bank account details, or card details (card number, expiry date) used for BDT deposits and withdrawals.
• Account credentials: Username and hashed password. bl33 does not store passwords in plain text.
• Communications data: The content of messages you send to our support team via email or live chat, including any attachments.
• Responsible gaming data: Deposit limits, session time limits, cooling-off preferences, and self-exclusion requests you submit through your account dashboard.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, features used, games played, bets placed, time spent on each section, and clickstream data.
• Transaction data: Full record of all deposits, withdrawals, bonuses claimed, wagers placed, and game outcomes associated with your account.
• Cookie data: Session identifiers and analytical identifiers stored on your device (see Section 10 for full cookie details).
• Login and security data: Login timestamps, device fingerprints, OTP verification records, and any failed login attempt logs.

3. How We Collect Data

bl33 collects personal data through the following channels:

• Direct submission: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or update your account profile.
• Automated collection: Through cookies, server logs, and platform analytics tools that record your interaction with the bl33 website and services as described in Section 10.
• Third-party sources: Identity and fraud-check data may be received from KYC verification partners and fraud prevention databases where you have consented to such checks or where bl33 is legally required to conduct them.
• Payment providers: Transaction confirmation data is received from bKash, Nagad, Rocket, Upay, and card payment processors when you make deposits or initiate withdrawals.

4. Lawful Basis for Processing

bl33 processes your personal data only where a lawful basis exists for doing so. The primary lawful bases on which bl33 relies are as follows:

Processing Activity	Lawful Basis
Account registration and management	Performance of contract
Processing BDT deposits and withdrawals	Performance of contract
KYC identity and age verification	Legal obligation
Anti-money-laundering checks	Legal obligation
Fraud detection and account security	Legitimate interests
Responsible gaming monitoring	Legal obligation / Legitimate interests
Customer support communications	Performance of contract
Platform analytics and improvements	Legitimate interests
Promotional communications (where opted in)	Consent
Record-keeping and audit trails	Legal obligation

5. How We Use Your Data

bl33 uses the personal data it collects for the following purposes:

• To create, verify, and manage your bl33 account, including processing your registration and maintaining your account profile.
• To verify your identity and age as required under our responsible gaming obligations. Players under the age of 21 are not permitted to use the platform.
• To process BDT deposits via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to process withdrawal requests to your verified payment account.
• To conduct anti-money-laundering (AML) screening and Know Your Customer (KYC) verification in compliance with applicable offshore regulatory obligations.
• To detect, investigate, and prevent fraudulent transactions, account abuse, bonus misuse, and other prohibited conduct as defined in the bl33 Terms & Conditions.
• To monitor gameplay for signs of problem gambling and to administer responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion requests.
• To respond to your support requests, complaints, and enquiries submitted to our 24/7 support team.
• To send you transactional communications such as deposit confirmations, withdrawal updates, account security alerts, and KYC status notifications. These communications are not optional as they relate to the operation of your account.
• To send you promotional communications about bl33 bonuses, offers, and new features — only where you have explicitly consented to receive such communications. You may withdraw this consent at any time by updating your account preferences or contacting support.
• To improve the bl33 platform through aggregated, anonymised usage analytics that help us understand which features are most useful to our Bangladesh-based player community.
• To comply with any legal obligation, court order, or request from a competent authority that requires bl33 to produce records or account information.

6. Sharing Your Data

bl33 does not sell, rent, or trade your personal data. Data is shared only with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

6.1 Payment Processors

Transaction data including your payment account number and transaction amounts is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard solely for the purpose of processing your deposit and withdrawal requests. These providers operate under their own privacy frameworks and are responsible for data they independently hold.

6.2 KYC and Identity Verification Providers

Your identity documents and personal details may be submitted to our KYC verification partner(s) for the purpose of confirming your identity and age. These providers are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.

6.3 Fraud Prevention and AML Services

bl33 may share account activity data with fraud detection and anti-money-laundering screening services to identify and prevent criminal activity. Where a transaction is flagged as suspicious, relevant data may be shared with law enforcement or financial intelligence authorities as required by law.

6.4 Game Providers

When you launch a game hosted by a third-party provider such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, a session token and your account identifier may be transmitted to that provider's system to authenticate your game session. Game providers do not receive your full identity profile or payment details.

6.5 Legal and Regulatory Disclosures

bl33 may disclose personal data where required to do so by law, court order, or the lawful request of a competent authority. In such circumstances, bl33 will disclose only the minimum data necessary to satisfy the relevant obligation.

7. International Transfers

bl33 operates as an offshore platform and its servers, service providers, and operational teams may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to and processed in countries that do not have the same data protection laws as Bangladesh.

Where such transfers occur, bl33 takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements with receiving parties that impose data protection obligations equivalent to those described in this policy. By using the bl33 platform, you acknowledge and consent to the transfer of your personal data to offshore locations for the purposes described in this policy.

8. Data Retention

bl33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on the bl33 platform.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of your last transaction, or longer if required by the applicable AML framework.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication.
• Closed account data: On account closure, your personal data is archived and retained for the legally required minimum period before being securely deleted or anonymised.
• Analytical data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify any individual.

Where you request deletion of your data and no legal retention obligation prevents us from complying, bl33 will process the deletion request within 30 days and confirm completion to your registered email address.

9. Security Measures

bl33 employs a range of technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bl33 servers, ensuring that payment details and account credentials cannot be intercepted in transit.
• Password hashing using a one-way cryptographic algorithm. bl33 never stores your password in readable form, and our support team cannot retrieve your password — only reset it.
• Two-factor and OTP verification required when logging in from a new or unrecognised device, adding a second layer of protection beyond your password.
• Access controls that restrict employee access to personal data on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular security training.
• Intrusion detection and anomaly monitoring on bl33 infrastructure to identify and respond to potential security incidents in real time.
• Regular security reviews of platform infrastructure, including vulnerability assessments and penetration testing conducted by qualified security professionals.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data in a material way, bl33 will notify affected players as promptly as practicable and take immediate steps to contain and remediate the incident.

10. Cookies & Tracking

bl33 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with our services. The following categories of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, store game state, and enable core platform functionality. Without these, the site cannot function.	No — required for operation
Functional	Remember your language and display preferences, and store your responsible gaming settings between sessions.	Yes, via browser settings
Analytical	Collect anonymised data on page visits, feature usage, and navigation paths to help bl33 improve the platform experience.	Yes, via browser settings
Security	Store device fingerprint tokens used for fraud detection and OTP verification on new login devices.	No — required for security

bl33 does not use advertising cookies, cross-site tracking pixels, or third-party retargeting scripts. You can manage cookie preferences through your browser settings. Please be aware that disabling functional or analytical cookies may affect certain non-essential features of the platform.

11. Your Rights

As a data subject, you hold the following rights in relation to the personal data bl33 holds about you. Requests relating to any of these rights should be submitted in writing to [email protected]. bl33 will respond within 30 calendar days of receiving a valid, verified request.

• Right of Access: You may request a copy of all personal data bl33 holds about you, along with information about how it is processed and with whom it is shared.
• Right to Rectification: If any personal data held by bl33 is inaccurate or incomplete, you may request that it be corrected. Minor updates (such as a change of mobile number) can be made directly within your account settings.
• Right to Erasure: You may request that bl33 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require us to retain certain records.
• Right to Restrict Processing: In certain circumstances, you may request that bl33 limit the way it uses your personal data without deleting it — for example, while a dispute is under investigation.
• Right to Data Portability: You may request that bl33 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to processing activities based on bl33's legitimate interests, including profiling for personalisation purposes. You may also withdraw consent to receive promotional communications at any time.
• Right to Withdraw Consent: Where bl33 relies on your consent as the lawful basis for a specific processing activity, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Please note that some rights are subject to limitations — for example, bl33 cannot delete transaction records that are legally required to be retained for AML purposes. Where a request cannot be fulfilled in full, bl33 will explain the reason in writing.

12. Children & Minors

The bl33 platform is strictly intended for adults aged 21 and over. bl33 does not knowingly collect personal data from individuals under the age of 21. If bl33 discovers or is made aware that an account has been registered by a person under 21, the account will be immediately suspended, all activity will be reviewed, and the account will be closed in accordance with the bl33 Terms & Conditions and applicable responsible gaming obligations.

If you are a parent or guardian and believe that a minor in your care has accessed the bl33 platform and submitted personal data, please contact us immediately at [email protected] so that we can take prompt action.

13. Third-Party Links

The bl33 platform may from time to time contain references to or descriptions of third-party services, payment providers, or game providers. Where the bl33 platform links to a third-party website or service, this Privacy Policy does not apply to that third party's data practices. bl33 has no control over and accepts no responsibility for the privacy policies or data handling practices of third-party websites. You should review the privacy policy of any third-party service you access independently.

14. Policy Changes

bl33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When a material change is made, bl33 will update the "last updated" date at the top of this document and, where reasonably practicable, notify registered account holders via their registered email address or via a platform notification.

Your continued use of the bl33 platform following publication of any revised Privacy Policy constitutes your acceptance of the updated terms. The version of this Privacy Policy currently published on the bl33 website is the version in effect. If you do not agree with any change to this policy, you should cease using the platform and may request account closure by contacting support.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, the way bl33 handles your personal data, or if you wish to exercise any of the rights described in Section 11, please contact our dedicated support team. All data-related requests must be submitted in writing. Our team will acknowledge receipt within 24 hours and resolve the matter within 30 calendar days.

Support contact (plain text — not a clickable link): [email protected]

bl33's support team is available 24 hours a day, 7 days a week. For account-specific matters, please include your registered username and the email address associated with your bl33 account in your message so that we can verify your identity before processing any data-related request.

For information about responsible gaming tools, deposit limits, or self-exclusion, please visit the Responsible Gaming page.