bw333 Privacy Policy — How We Collect, Use, and Protect Your Data

bw333 operates the online sports betting and casino platform accessible at bw333.io. In the context of this Privacy Policy, references to "bw333", "we", "us", or "our" refer to the operator of the bw333 platform. We are the data controller responsible for the personal information collected through the Platform.

bw333 is a platform built primarily for players based in Bangladesh. Our services include cricket betting, live casino table games, slot titles, crash games, and instant games, all denominated in Bangladesh Taka (৳). We serve a community of over 50,000 active players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

For all data-related enquiries, including rights requests, complaints, or questions about this Privacy Policy, please contact our Data Protection team via live chat on the Platform or by emailing [email protected] (plain text — not a clickable link). We aim to respond to all data-related enquiries within five (5) business days.

bw333 collects personal data in the following categories depending on how you interact with the Platform. We collect only the data that is necessary and proportionate to the specific purpose for which it is used.

We do not collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, political opinions, or biometric data) except where you voluntarily provide information of a sensitive nature in the context of a responsible gaming or self-exclusion request, in which case it is used solely for that purpose and handled with heightened care.

bw333 uses your personal data only for lawful, specified purposes. The table below maps each primary use of your data to the purpose it serves and the lawful basis on which we rely:

bw333 will never use your personal data for purposes that are incompatible with those listed above without first informing you and, where required, obtaining your explicit consent.

Every processing activity carried out by bw333 relies on at least one of the following lawful bases:

• Contract performance: Processing is necessary to fulfil the contractual relationship established when you create a bw333 Account — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing is required by law — including KYC verification, AML compliance, age verification (21+ requirement), and record-keeping requirements.
• Legitimate interests: Processing serves bw333's legitimate business interests in operating a safe, fair, and commercially viable platform — including fraud prevention, security monitoring, and aggregate analytics — provided those interests are not overridden by your own rights and interests.
• Consent: Where processing is not covered by the above bases — primarily for marketing communications and non-essential cookies — we rely on your freely given, informed, and specific consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital interests: In exceptional circumstances where we have reason to believe that your safety or the safety of others is at risk (for example, in the context of a severe responsible gaming concern), we may process relevant information to protect vital interests.

bw333 shares personal data with the following categories of third-party recipients under contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, City Bank, Visa, and Mastercard — to process deposits and withdrawals on your behalf.
• Identity verification and KYC partners: Third-party identity verification providers who assist bw333 in verifying your age, identity, and address documents as required for account security and compliance.
• Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game studios — to the extent necessary to deliver game sessions and authenticate your account within their game platforms. These providers operate under their own data handling obligations and are contractually bound by bw333's data protection standards.
• Fraud prevention and security services: Specialist providers that help bw333 detect and prevent duplicate accounts, bot activity, chargebacks, and other fraudulent or prohibited behaviour on the Platform.
• Analytics and platform performance providers: Services used to analyse aggregated, pseudonymised platform usage data for the purpose of improving bw333's products and services.
• Legal and regulatory authorities: Where required by a valid legal process, court order, or regulatory direction, bw333 may disclose personal data to law enforcement or government authorities. We will notify you of such disclosures where we are legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of bw333's business assets, your personal data may be transferred to the acquiring entity, subject to the same data protection standards described in this Policy. You will be notified in advance of any such transfer.

All third parties who receive bw333 user data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond that for which it was shared.

bw333 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. They allow the Platform to recognise your device, remember your preferences, and collect usage analytics.

The following categories of cookies are used on the bw333 Platform:

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block, delete, or receive alerts for cookies. Please note that disabling strictly necessary cookies may prevent you from accessing certain parts of the Platform or impair its performance. Disabling analytics or marketing cookies will not affect your ability to use the core services on bw333.

bw333 does not use cookies to track your activity across unaffiliated third-party websites for advertising purposes.

bw333 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

When data is no longer required for its original purpose or any compatible secondary purpose, bw333 will either securely delete it or anonymise it so that it can no longer be associated with you as an individual. Deletion requests submitted by players may be subject to retention obligations that override the request — in such cases, bw333 will inform you of the specific data that must be retained and the reason why.

The following rights are available to you in relation to the personal data bw333 holds about you:

• Right of Access: You have the right to request a copy of the personal data bw333 holds about you, along with information about how it is used, where it came from, who it has been shared with, and how long it will be retained.
• Right to Rectification: If any personal data bw333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that bw333 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where you object to processing and we have no overriding legitimate interests. Erasure requests are subject to legal retention obligations — see Section 7.
• Right to Restriction of Processing: You may request that bw333 suspend processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object at any time to processing of your personal data based on legitimate interests (including profiling) and to processing for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
• Rights Related to Automated Decision-Making: bw333 may use automated processes to flag accounts for fraud review or responsible gaming intervention. You have the right to request human review of any automated decision that significantly affects you, to express your point of view, and to contest the decision.
• Right to Withdraw Consent: Where bw333 relies on your consent as the lawful basis for processing (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bw333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the bw333 Platform is encrypted in transit using industry-standard SSL/TLS protocols. This applies to account logins, payment submissions, and all API communications.
• Encryption at Rest: Sensitive personal data stored in bw333's databases — including identity documents, financial records, and password credentials — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within bw333's internal systems is governed by role-based access controls (RBAC), ensuring that staff members can access only the data necessary for their specific job function. All internal data access is logged and auditable.
• Password Security: User passwords are never stored in plain text. All passwords are hashed and salted using a robust cryptographic hashing algorithm before storage.
• Two-Factor Authentication: bw333 supports optional two-factor authentication (2FA) linked to your registered Bangladesh mobile number, adding an additional layer of protection to your account login.
• Security Monitoring: bw333 maintains continuous security monitoring of the Platform infrastructure, including intrusion detection, anomaly detection on login activity, and automated alerting for suspicious account behaviour.
• Vendor Security Standards: All third-party service providers who process bw333 user data are required to meet security standards consistent with bw333's own requirements, as documented in data processing agreements.
• Data Breach Response: In the event of a personal data breach that presents a risk to your rights and freedoms, bw333 will notify you without undue delay and will take all reasonable steps to mitigate the breach and prevent recurrence.

While bw333 takes all reasonable precautions to protect your data, no system is completely immune to security risks. You are responsible for keeping your own account credentials secure — including your password and any 2FA codes — and for notifying bw333 immediately if you suspect unauthorised access to your account.

Age verification is a mandatory step in the bw333 account registration and KYC process. All users are required to confirm that they are at least 21 years of age at the point of registration. Where bw333 has reasonable grounds to suspect that an account has been registered by a person under the age of 21, the account will be immediately suspended pending verification, and if the suspicion is confirmed, the account will be permanently closed and any balance forfeited.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on bw333 or provided personal data to the Platform without your knowledge, please contact us immediately via live chat or at [email protected]. We will act promptly to investigate and, where confirmed, delete the account and associated data and return any deposited funds to the registered payment method.

bw333 supports parental control tools and internet filtering services that allow guardians to restrict access to gambling websites. We encourage responsible household internet management to prevent underage access to online gambling platforms.

bw333 reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made, we will notify active players via the email address or mobile number registered to their bw333 Account, and we will display a prominent notice on the Platform for a minimum of seven (7) days prior to the revised Policy taking effect.

The current version of this Privacy Policy, including its effective date, is always accessible at bw333.io/privacy-policy. The effective date at the top of this document is updated each time a new version is published. We encourage you to review this Policy periodically to stay informed of how bw333 handles your personal data.

Your continued use of the bw333 Platform after a revised Privacy Policy takes effect constitutes your acknowledgment of the updated terms. If you do not agree with any material change to this Policy, you have the right to close your Account before the change takes effect and withdraw any remaining real-money balance. Account closure requests can be submitted via live chat or by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to how bw333 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 directly on the bw333 Platform — the fastest way to receive assistance with data-related queries.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line and your registered username or Account ID to help us locate your records promptly.
• Support Hours: Around the clock, Bangladesh Standard Time (BST, UTC+6), including all Bangladesh public holidays.
• Response Time: We aim to acknowledge all privacy-related contacts within twenty-four (24) hours and provide a substantive response within five (5) business days. For formal rights requests, we will respond within thirty (30) days.

bw333 takes data protection seriously. Every privacy enquiry is handled by trained staff who are familiar with this Policy and with the rights of our players. We are committed to resolving your concerns promptly, transparently, and fairly.