b33d Privacy Policy — How We Handle Your Personal Data

1 Introduction

1.1 This Privacy Policy ("Policy") sets out the practices of b33d ("b33d", "we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("Player", "you", "your") of the b33d online betting and casino platform accessible at b33d.io.

1.2 b33d is committed to handling personal data with transparency, integrity, and in accordance with applicable data protection standards. We recognise that players entrust b33d with sensitive information when they register and use our services, and we take that responsibility seriously.

1.3 By registering an account on b33d, depositing funds, or using any feature of the b33d platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the b33d platform.

1.4 This Policy should be read alongside the b33d Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and any other b33d document on the subject of data privacy, this Policy shall prevail.

2 Data Controller

2.1 For the purposes of this Privacy Policy, b33d acts as the data controller in respect of the personal data collected from players using the b33d platform. As data controller, b33d determines the purposes for which and the means by which personal data is processed.

2.2 All data-related enquiries, subject access requests, and requests to exercise your data rights should be directed to the b33d data protection contact at: [email protected] (displayed as plain text — not a clickable link).

3 Personal Data We Collect

3.1 b33d collects personal data across several categories, depending on how you interact with the platform. The table below provides a structured overview of the categories of data b33d collects and the context in which each category arises.

3.2 b33d does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming interaction.

4 How We Collect Your Data

4.1 Direct Collection. The majority of personal data b33d holds is provided directly by you. This includes data submitted during account registration, identity verification (KYC), payment method setup, customer support communications, and the completion of responsible gaming tools such as deposit limit or self-exclusion requests.

4.2 Automated Collection. When you access and use the b33d platform, certain technical and usage data is collected automatically through server logs, cookies, pixel tags, and similar tracking technologies. This includes your IP address, browser fingerprint, session identifiers, and detailed records of your platform interactions. See Section 8 for further information on cookies.

4.3 Third-Party Sources. In limited circumstances, b33d may receive personal data about you from third-party sources, including:

• Identity verification service providers who assist b33d in confirming the authenticity of documents submitted during KYC;
• Payment processors and mobile financial service providers (such as bKash, Nagad, and Rocket) who share transaction confirmation data with b33d;
• Fraud prevention and AML screening databases that b33d consults to fulfil its legal obligations;
• Analytics providers who supply aggregated behavioural data to help b33d improve the platform experience.

5 How We Use Your Personal Data

5.1 b33d uses personal data for the following defined purposes:

• Account Management: To create, maintain, and administer your b33d player account, including processing deposits and withdrawals in BDT.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with applicable Know Your Customer (KYC) standards.
• Payment Processing: To facilitate your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and supported banking channels.
• Fraud and AML Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes on the b33d platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide ongoing support through the b33d customer service team.
• Responsible Gaming: To monitor for signs of problem gambling behaviour and to administer responsible gaming tools including self-exclusion, deposit limits, and cooling-off periods in accordance with b33d's Responsible Gaming Policy.
• Platform Improvement: To analyse aggregated usage patterns and improve the design, functionality, and game offering of the b33d platform.
• Legal Compliance: To fulfil b33d's obligations under applicable law, including record-keeping requirements and responding to lawful requests from regulatory authorities.
• Marketing Communications: Where you have provided explicit consent, to send you promotional communications about b33d offers, new game launches, and seasonal promotions. You may withdraw consent to marketing communications at any time by contacting [email protected].

6 Legal Basis for Processing

6.1 b33d processes personal data only where a valid legal basis exists. The primary legal bases on which b33d relies are as follows:

• Performance of a Contract: Processing is necessary to fulfil the b33d Terms & Conditions that you agreed to upon registration — for example, managing your account, processing payments, and providing access to games.
• Legal Obligation: Processing is necessary to comply with legal requirements to which b33d is subject, including anti-money laundering (AML) regulations, age verification mandates, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for b33d's legitimate interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, and improving the overall player experience.
• Consent: Where processing is not otherwise justified by the above bases, b33d will seek your explicit consent — for example, in connection with optional marketing communications.

7 Data Sharing and Disclosure

7.1 b33d does not sell, rent, or trade your personal data. b33d may share your personal data with the following categories of third parties strictly for the operational and compliance purposes described in this Policy:

• Identity Verification Providers: Third-party KYC and document verification services that assist b33d in confirming player identities and ages;
• Payment Service Providers: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners required to process your deposits and withdrawals;
• Fraud and AML Screening Services: Providers of fraud detection and anti-money laundering database screening tools used to fulfil b33d's legal obligations;
• IT and Hosting Infrastructure Providers: Secure cloud hosting and data centre providers that store b33d platform data on b33d's behalf under binding data processing agreements;
• Game Software Providers: Casino game developers and providers (such as Pragmatic Play, Evolution Gaming, Spribe, and similar studios) who may receive pseudonymised game session data for technical and audit purposes;
• Analytics Providers: Service providers supplying aggregated, anonymised analytical data to help b33d understand platform usage patterns;
• Regulatory and Law Enforcement Authorities: Where b33d is required by law or by a lawful order from a competent authority to disclose personal data, b33d will comply with that obligation.

7.2 All third-party service providers with whom b33d shares personal data are required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations. b33d does not authorise any third party to use your personal data for their own independent commercial purposes.

8 Cookies and Tracking Technologies

8.1 The b33d platform uses cookies and similar tracking technologies (including pixel tags and local storage objects) to operate the platform efficiently, remember your preferences, maintain your login session, and gather anonymised analytics data.

8.2 The following categories of cookies are used on the b33d platform:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management and security. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and to personalise your experience on the b33d platform.
• Analytics Cookies: Used to collect anonymised data about how players interact with the b33d platform, enabling b33d to identify areas for improvement. This data is aggregated and does not identify individual players.
• Marketing Cookies: Used, where consent has been provided, to deliver relevant promotional content about b33d. These cookies track interactions with b33d marketing materials.

8.3 You may adjust your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will affect your ability to use core b33d platform features, including maintaining a login session.

9 Data Security

9.1 b33d implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the b33d platform;
• Encryption of sensitive data at rest on b33d's servers;
• Role-based access controls ensuring that personal data is accessible only to authorised b33d personnel with a demonstrable operational need;
• Regular internal security audits and vulnerability assessments of the b33d platform infrastructure;
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorised account access;
• Secure disposal procedures for physical and digital records containing personal data when those records are no longer required.

9.2 Notwithstanding the measures above, no data transmission over the internet or electronic storage system is entirely immune from risk. While b33d takes all commercially reasonable steps to secure your personal data, b33d cannot guarantee absolute security. In the event of a data security incident materially affecting your personal data, b33d will notify you in a timely manner and take immediate steps to mitigate the impact.

9.3 You are responsible for maintaining the security of your b33d account credentials. b33d strongly recommends using a unique, strong password for your b33d account and enabling two-factor authentication where available. Do not share your credentials with any other person.

10 Data Retention

10.1 b33d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your b33d account and for a period of at least five years following account closure, in order to comply with applicable AML record-keeping requirements;
• KYC Verification Documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later;
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction;
• Customer Support Communications: Retained for up to three years from the date of each communication, unless a longer period is required in connection with an open dispute or legal matter;
• Marketing Consent Records: Retained until consent is withdrawn and for one year thereafter as evidence of consent status;
• Technical and Usage Logs: Retained for up to 12 months unless required longer for security or fraud investigation purposes.

10.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

11 Your Data Rights

11.1 Subject to applicable law, you hold the following rights in respect of your personal data held by b33d:

• Right of Access: You have the right to request a copy of the personal data b33d holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data b33d holds about you be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is subject to overriding legal obligations — for example, b33d's AML record-keeping requirements may prevent the immediate deletion of certain financial records.
• Right to Restrict Processing: You have the right to request that b33d restricts the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to b33d in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where b33d relies on legitimate interests as its legal basis, and where your fundamental rights override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11.2 To exercise any of the rights listed above, please submit a written request to [email protected]. b33d will acknowledge your request within 5 business days and aim to respond in full within 30 days. In complex cases, this period may be extended by up to a further 30 days, in which case b33d will notify you of the extension and the reasons for it.

11.3 b33d will not charge a fee for processing your data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative charge may apply. b33d may request verification of your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised person.

12 Children and Minors

12.1 The b33d platform is strictly intended for adults aged 21 years and above. b33d does not knowingly collect personal data from any individual under the age of 21. If b33d becomes aware that personal data has been collected from a player who is under 21 years of age, that account will be closed immediately, all associated personal data will be deleted to the extent permitted by applicable legal obligations, and the matter may be referred to the relevant authorities.

12.2 If you have reason to believe that a minor has registered on the b33d platform, please notify b33d immediately at [email protected]. b33d takes such reports extremely seriously and will investigate all notifications as a matter of urgency.

13 Third-Party Links

13.1 The b33d platform may, from time to time, contain references to third-party services such as payment providers (bKash, Nagad, Rocket) and game software studios (Pragmatic Play, Evolution Gaming, Spribe, and others). If you navigate from the b33d platform to a third-party website or application, please be aware that those third parties operate their own privacy policies, which are entirely independent of this Policy.

13.2 b33d is not responsible for the privacy practices of any third-party service. b33d strongly recommends that you review the privacy policy of any third-party service before providing them with personal data. The inclusion of a reference to a third-party service on the b33d platform does not constitute an endorsement of that party's privacy practices.

14 Amendments to This Privacy Policy

14.1 b33d reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be posted on the b33d platform at b33d.io/privacy-policy with an updated effective date. Where changes are material, b33d will take reasonable steps to notify registered players, which may include sending a notification to the email address registered on your b33d account.

14.2 Your continued use of the b33d platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the b33d platform and may request account closure in accordance with the b33d Terms & Conditions.

14.3 b33d encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being handled.

15 Contact Information

15.1 If you have any questions, concerns, or complaints regarding this Privacy Policy, the handling of your personal data, or the exercise of your data rights, please contact the b33d data protection team using the details below. All correspondence must be submitted in English.

15.2 b33d is committed to resolving all privacy-related concerns promptly and transparently. If you feel that your concern has not been adequately addressed by the b33d support team, you may escalate the matter using the formal dispute resolution process described in the b33d Terms & Conditions.