bv33 Privacy Policy — How We Protect and Handle Your Personal Data

1Who We Are

bv33 ("we", "us", "our") is an online sports betting and casino platform operating at bv33.io, serving players primarily in Bangladesh and across South Asia. bv33 is the data controller responsible for personal data collected through the bv33 website, mobile interface, and any associated applications or services.

This Privacy Policy applies to all personal data processed by bv33 in connection with your use of the platform, including data collected during account registration, deposit and withdrawal transactions, betting and gaming activity, customer support interactions, and marketing communications (where you have opted in).

By registering an account on bv33, you confirm that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, you should not register or continue to use the bv33 platform.

2Data We Collect

bv33 collects personal data that is necessary to provide you with a safe, legal, and high-quality betting and gaming experience. The categories of personal data we collect include the following:

bv33 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation. If any such data is inadvertently received — for example, in a free-text support message — it will not be used for profiling purposes and will be deleted or anonymised as soon as practicable.

3How We Collect Data

bv33 collects personal data through several channels:

• Direct collection: Data you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access or interact with the bv33 platform, including via cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Data received from payment processors (such as bKash, Nagad, and Rocket) to confirm transaction status; data from identity verification service providers to confirm your age and identity; data from fraud detection partners to protect the platform's integrity.
• Publicly available sources: In limited circumstances, bv33 may verify information you provide against publicly available records (such as official government ID verification databases) for the purpose of age and identity verification.

4Why We Use Your Data

bv33 uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and administer your bv33 player account, including processing deposits and withdrawals, applying bonuses, and maintaining your betting and gaming history.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and that your identity is genuine, as required by our responsible gaming and anti-fraud obligations.
• Anti-money laundering (AML) and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. This includes monitoring transaction patterns and cross-referencing your data against internal and external watchlists where legally required.
• Responsible gaming: To deliver responsible gaming tools such as deposit limits, session reminders, cool-off periods, and self-exclusion, and to monitor usage patterns that may indicate problem gambling behaviour.
• Customer support: To respond to enquiries, resolve disputes, and provide technical assistance through live chat, email, and WhatsApp.
• Platform improvement: To analyse usage data in aggregate or anonymised form to improve the bv33 platform's design, performance, game selection, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.
• Legal and regulatory compliance: To comply with applicable laws, regulations, court orders, and regulatory requests, including record-keeping obligations and cooperation with law-enforcement authorities.

5Legal Basis for Processing

bv33 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing is necessary to perform the contract between you and bv33 — specifically, to operate your account, process bets, handle payments, and provide gaming services.
• Legal obligation: Processing is necessary for bv33 to comply with applicable legal obligations, including age verification, AML checks, record-keeping, and responses to regulatory or law-enforcement requests.
• Legitimate interests: Processing is necessary for bv33's legitimate business interests, including fraud detection, platform security, customer support quality assurance, and anonymised analytics — provided these interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — in particular, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6Data Sharing & Disclosure

bv33 does not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or third-party marketers. Personal data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive the financial data required to process your deposit or withdrawal transaction.
• Identity verification providers: Specialist third-party services that verify your age and identity documents receive the minimum personal data required to complete that verification.
• Fraud detection and AML partners: Specialist compliance service providers may receive transaction data and account metadata to perform screening against fraud and money-laundering watchlists.
• Game providers: Where technically required, an anonymised or pseudonymised session token may be shared with third-party game providers (such as Evolution Gaming, Pragmatic Play, Ezugi, and Spribe) to initiate a game session. bv33 does not share your name, contact details, or payment information with game providers.
• Legal and regulatory authorities: bv33 may disclose personal data to governmental authorities, regulators, or law-enforcement agencies where required by law, court order, or regulatory direction, including in connection with investigations into fraud, money laundering, or underage gambling.
• Corporate transactions: In the event of a merger, acquisition, asset sale, or restructuring, your data may be transferred to the acquiring entity. Where possible, bv33 will notify you in advance of any such transfer.

All third parties with whom bv33 shares personal data are required to process that data only for the specified purpose, under appropriate contractual data-protection terms, and in compliance with applicable data protection law.

7Cookies & Tracking Technologies

bv33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and detect fraudulent activity. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform. They enable functions such as user authentication, session management, load balancing, and security features. These cookies cannot be disabled without impairing the platform's functionality.
• Functional cookies: Store your preferences such as preferred language, currency display (BDT or INR), and responsible gaming settings so that these are remembered between sessions.
• Analytics cookies: Collect anonymised or aggregated data about how players use the platform — for example, which game categories are most popular, which deposit methods are most used, and where users encounter errors. This data is used to improve the platform.
• Security cookies: Used to identify and block suspicious access patterns, bot traffic, and potential fraud. These cookies may record IP addresses, device fingerprints, and behavioural patterns.

bv33 does not use advertising or retargeting cookies from third-party ad networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to use the bv33 platform.

8Data Retention

bv33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and transaction records: Retained for a minimum of five years from the date of your last transaction or the date of account closure, whichever is later. This period is required for AML compliance and financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five years from the date of verification. Copies of identity documents are stored in encrypted form.
• Support communications: Live chat transcripts, email correspondence, and support tickets are retained for three years from the date of the communication.
• Technical and usage data (logs): Server logs and detailed usage logs are retained for up to 12 months. Aggregated and anonymised analytical data may be retained indefinitely as it no longer constitutes personal data.
• Marketing preference records: Opt-in and opt-out records are retained for the duration of your account and for three years after account closure to demonstrate compliance with consent requirements.

When the applicable retention period expires, personal data is securely deleted or anonymised using industry-standard methods. Where deletion is not immediately practicable — for example, where data is held in backup systems — the data will be isolated and not used for any active processing purpose until it can be deleted.

9Data Security

bv33 applies a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, loss, alteration, or disclosure.

Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bv33 platform is encrypted in transit using industry-standard TLS 1.2 or 1.3 protocols.
• Encryption at rest: Sensitive personal data, including identity documents and financial details, is encrypted at rest using AES-256 encryption within bv33's secure data infrastructure.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. bv33 employees and contractors are granted only the minimum level of data access required to perform their role. All access is logged and audited.
• Two-factor authentication (2FA): 2FA is available to all bv33 players to protect account access. Players are strongly encouraged to enable 2FA via the account security settings.
• Penetration testing and vulnerability assessments: bv33's platform undergoes regular independent security testing to identify and remediate vulnerabilities.
• Incident response: bv33 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, bv33 will notify affected players promptly via the registered email address.

While bv33 applies rigorous security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account login credentials confidential and for notifying bv33 support immediately if you suspect your account has been compromised.

10International Data Transfers

bv33 operates across South Asia and may process or store personal data on servers located outside of Bangladesh. Where personal data is transferred to a jurisdiction that does not offer a comparable level of data protection to that applied in Bangladesh, bv33 will implement appropriate safeguards to ensure your data remains protected. These safeguards may include standard contractual clauses, data processing agreements, or other legally recognised transfer mechanisms.

In particular, data shared with identity verification providers, payment processors, and game providers may be processed in their respective countries of operation. All such providers are required by contract to maintain data security standards no less rigorous than those described in this Privacy Policy.

11Your Rights

bv33 respects your rights over your personal data and provides the following mechanisms to exercise those rights. Requests may be submitted at any time to the bv33 support team via live chat or the email address listed in Section 15.

• Right of access: You have the right to request a copy of the personal data bv33 holds about you. bv33 will provide this within 30 days of a verified request.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data. Minor corrections (such as updating your contact number) can be made directly through account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Note that bv33 may be legally required to retain certain data (such as transaction records) for regulatory compliance purposes and may not be able to delete all data immediately upon request.
• Right to restrict processing: You have the right to request that bv33 limits the processing of your personal data in certain circumstances, for example while a dispute regarding its accuracy is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to bv33 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and to opt out of direct marketing at any time.
• Right to withdraw consent: Where processing is based on consent — in particular, for marketing communications — you may withdraw consent at any time without affecting any prior processing.

To exercise any of these rights, please contact bv33 support. We will respond within 30 days. Complex requests may take longer; we will inform you if an extension is needed. We may ask you to verify your identity before processing any data rights request to prevent unauthorised access to your personal data.

12Children & Minors

The bv33 platform is strictly intended for adults aged 21 and above. bv33 does not knowingly collect personal data from any person under the age of 21. Age verification is performed at account registration and may be repeated at any stage during the account lifecycle.

If bv33 becomes aware that it has collected personal data from a person under the age of 21, it will immediately close the relevant account, void all associated bets and gaming activity, and delete or anonymise the personal data associated with that account, subject to any legal retention obligations that may apply.

If you are a parent or guardian and believe that your child has created a bv33 account, please contact bv33 support immediately via live chat so that the account can be investigated and closed without delay.

13Third-Party Services

The bv33 platform integrates services provided by third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. When you launch a game provided by one of these studios, certain technical data (such as a session token and currency preference) may be transmitted to the provider's servers to initialise and maintain your game session.

bv33 does not transmit your name, email address, phone number, or payment details to game providers. However, each game provider operates its own privacy and security practices in relation to session data. bv33 is not responsible for the privacy practices of third-party game providers and encourages you to review their respective privacy policies if you have specific concerns.

Payment service providers such as bKash, Nagad, Rocket, and Upay also have their own privacy policies governing how they handle the financial data processed through their platforms. bv33 recommends that you review the privacy documentation of any payment method you use.

14Changes to This Policy

bv33 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and/or via a prominent notice on the bv33 platform prior to the changes taking effect.

The effective date shown at the top of this document indicates the date of the most recent revision. Your continued use of the bv33 platform after the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how bv33 protects your data.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bv33 holds about you, please contact our Data Protection team using the details below. All communications are handled in English and are treated with strict confidentiality.

• Email: [email protected]
• Live Chat: Available 24/7 on the bv33 platform, Bangladesh Standard Time (BST, UTC+6)
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)

bv33 aims to acknowledge all data-related enquiries within 48 hours and to resolve them within 30 days. Where a request is particularly complex or where a high volume of requests has been received, this period may be extended by up to a further 30 days, and you will be informed accordingly.