bgo33 Privacy Policy — How We Collect, Use & Protect Your Personal Data

1. Introduction

bgo33 is an online casino and sports betting platform operated by bgo33 Entertainment Ltd. as an offshore licensed entity. We are fully committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered player, a visitor to bgo33.io, or a user of our customer support services.

This Policy is written in plain English to ensure clarity and accessibility for our Bangladesh-based player community. It sets out our practices in respect of personal data collection, use, storage, sharing and deletion, as well as your rights in relation to that data. This Policy should be read together with the bgo33 Terms & Conditions and our Responsible Gaming Policy.

Where we refer to "personal data" in this Policy, we mean any information that identifies you or that could reasonably be used to identify you — including your name, email address, phone number, date of birth, financial information, IP address and device identifiers.

2. Data Controller

The data controller responsible for the personal data you provide to bgo33 is:

As data controller, bgo33 Entertainment Ltd. determines the purposes for which and the means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under binding contractual agreements that require them to process your data only in accordance with our instructions and this Policy.

3. Personal Data We Collect

bgo33 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (required to verify 21+ age eligibility)
• Email address
• Mobile phone number
• Residential address
• Username and encrypted password
• Preferred currency (Bangladeshi Taka / BDT)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (National ID Card, Passport or Driving Licence)
• Proof of address documentation (utility bill, bank statement dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Source of funds declaration (for high-volume accounts as determined by our compliance team)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (bKash account number, Nagad number, Rocket number, bank account references)
• Transaction reference numbers and processing status
• Account balance history

3.4 Gaming Activity Data

• Games played, bet amounts, game outcomes and session durations
• Sports betting selections, wager history and settlement records
• Bonus and promotion participation history
• Responsible gaming settings and any self-exclusion or limit applications made through your account

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser type and version
• Session tokens and authentication logs
• Pages visited, time spent on-site and navigation path data (aggregate analytics only)

3.6 Communications Data

• Content of live chat and email support interactions
• Records of any complaints, disputes or formal requests submitted to bgo33
• Marketing communication preferences and opt-out records

4. How We Collect Your Data

We collect your personal data through the following channels:

Collection Method	Data Collected
Account Registration Form	Name, date of birth, email, phone number, address, password
KYC Document Upload	Identity documents, proof of address, payment method evidence
Deposit & Withdrawal Actions	Payment method identifiers, transaction amounts, processing records
Platform Usage	Gaming activity, session data, navigation logs, device and IP data
Customer Support Interactions	Chat transcripts, email correspondence, complaint records
Cookies & Similar Technologies	Session identifiers, preference settings, aggregate analytics events
Third-Party KYC & Payment Providers	Identity verification results, payment processing confirmations

bgo33 does not purchase personal data lists from third parties or collect data about you from social media platforms without your explicit consent.

5. Purposes & Legal Basis for Processing

bgo33 processes your personal data for the following purposes, each of which is supported by a defined legal basis:

5.1 Contract Performance

The majority of data processing at bgo33 is necessary to perform the contract between us — i.e., to operate your player account, process your deposits and withdrawals, deliver gaming services, settle bets and apply bonus entitlements. Without this processing, bgo33 cannot provide its services to you.

5.2 Legal & Regulatory Compliance

As an offshore licensed gaming operator, bgo33 is subject to anti-money laundering (AML) and know-your-customer (KYC) obligations. We are legally required to collect identity verification documents, monitor transaction patterns for suspicious activity and retain certain records for defined periods. This processing is carried out in compliance with the legal obligations of our licensing jurisdiction.

5.3 Legitimate Interests

bgo33 processes certain data on the basis of legitimate interests, including:

• Fraud detection and prevention — monitoring account and transaction activity for patterns that indicate fraudulent, abusive or criminal behavior.
• Platform security — logging authentication events and access patterns to identify unauthorized account access.
• Platform improvement — analyzing aggregate, anonymized usage data to improve game selection, payment flows and user experience.
• Responsible gaming monitoring — identifying players who may be exhibiting signs of problem gambling behavior, so that support can be offered proactively.

5.4 Consent

Where bgo33 sends you promotional communications (such as bonus offer emails, seasonal promotion notifications or VIP programme updates), we do so on the basis of your consent, which you provide during account registration by opting into marketing communications. You may withdraw this consent at any time by updating your communication preferences within your account settings or by contacting support at [email protected].

6. Data Sharing & Third-Party Disclosure

bgo33 does not sell, rent or trade your personal data. We may share your data with the following categories of third party, strictly on a need-to-know basis and subject to binding data processing agreements:

6.1 KYC & Identity Verification Providers

bgo33 works with specialist third-party KYC providers to verify the identity documents you submit during account verification. These providers receive the specific documents and data required to complete the verification check and are contractually prohibited from using your data for any other purpose.

6.2 Payment Processing Partners

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported Bangladeshi bank partners, bgo33 shares the transaction data and payment method identifiers necessary to process your requested transaction. All payment partners are established, reputable operators in the Bangladeshi financial services market.

6.3 Gaming Content Providers

Games on the bgo33 platform are supplied by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive a session token and anonymized player identifier to load and authenticate your gaming session. They do not receive your full personal profile, payment details or KYC documents.

6.4 IT Infrastructure & Security Providers

bgo33 uses cloud hosting, content delivery and cybersecurity service providers to operate the platform infrastructure. These providers may process technical data (such as IP addresses and log files) in the course of providing their services and operate under strict data processing terms.

6.5 Legal & Regulatory Disclosure

bgo33 may disclose your personal data to law enforcement authorities, regulatory bodies or courts if required to do so by applicable law, court order or in connection with the investigation of fraud, money laundering or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

7. Data Retention

bgo33 retains your personal data for the following periods:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML / regulatory compliance
KYC identity documents	Duration of account + 5 years post-closure	AML / KYC legal obligation
Transaction records	Duration of account + 5 years post-closure	Financial record-keeping obligation
Gaming activity logs	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming
Support communications	3 years from the date of interaction	Complaint resolution, quality assurance
Marketing preferences / consent	Until consent is withdrawn, then deleted	Consent management
Technical / device logs	12 months on a rolling basis	Security monitoring, fraud detection

At the end of the applicable retention period, personal data is permanently deleted or irreversibly anonymized. Anonymized, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and platform improvement purposes.

8. Cookies & Tracking Technologies

bgo33 uses cookies and similar browser-based storage technologies to operate the platform and improve your experience. The following categories of cookies are in use:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens that keep you logged into your account, security cookies that protect against cross-site request forgery (CSRF) attacks, and cookies that store your language and currency preferences. No personal data is transmitted to third parties via these cookies.

8.2 Analytics Cookies

bgo33 uses first-party analytics tools to collect anonymized, aggregate data about how players navigate the platform — including which pages are visited most frequently, where users encounter errors and how long sessions typically last. This data is used solely to improve platform performance and game selection. No individual player profiles are built using analytics cookies.

8.3 What We Do Not Use

bgo33 does not deploy:

• Third-party advertising or retargeting cookies
• Social media tracking pixels (Facebook Pixel, Twitter Pixel, etc.)
• Cross-site behavioral profiling scripts
• Fingerprinting technologies used to identify users across sessions without cookies

You may manage cookie settings through your browser's privacy controls. Disabling strictly necessary cookies may impair your ability to use the bgo33 platform, including preventing you from logging in or completing transactions.

9. Security Measures

bgo33 implements the following technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration or disclosure:

• 256-bit SSL/TLS Encryption: All data in transit between your device and bgo33's servers is encrypted using industry-standard TLS protocols. The bgo33 platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive stored data — including identity documents, financial records and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized bgo33 personnel on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Intrusion Detection & Monitoring: bgo33's infrastructure is continuously monitored for unauthorized access attempts, anomalous activity and potential data breaches using automated security tooling.
• Password Security: Passwords are stored as salted cryptographic hashes. bgo33 staff do not have access to your plaintext password at any time. We encourage all players to use a strong, unique password for their bgo33 account.
• Incident Response: In the event of a personal data breach that poses a risk to affected individuals, bgo33 will notify affected players by email within a reasonable timeframe and take all necessary steps to contain and remediate the breach.

10. Your Data Rights

As a player whose data is processed by bgo33, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. bgo33 will respond within 30 days of receiving a valid request.

10.1 Right of Access

You have the right to request a copy of all personal data bgo33 holds about you, together with information about how it is used and with whom it has been shared. This is commonly known as a Subject Access Request (SAR).

10.2 Right to Rectification

If any personal data bgo33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account profile data (name, address, contact details), you may be able to update this directly within your account settings. For KYC-verified data, please contact support to initiate a correction.

10.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing) or where you object to processing on legitimate interests grounds. This right is subject to overriding legal retention obligations — for example, bgo33 is required by AML regulations to retain certain records for a minimum of five years following account closure regardless of an erasure request.

10.4 Right to Data Portability

You have the right to receive a structured, machine-readable copy of the personal data you have provided to bgo33 (such as your account registration data and transaction history), and to request that this data be transmitted to another controller where technically feasible.

10.5 Right to Object & Restrict Processing

You have the right to object to processing carried out on the basis of legitimate interests and to request restriction of processing in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing pending verification of whether bgo33's legitimate grounds override your interests.

10.6 Withdrawal of Marketing Consent

Where processing is based on your consent (marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing. To opt out of all marketing communications from bgo33, update your preferences in your account settings or send a written request to [email protected].

11. Minors & Age Verification

The bgo33 platform is strictly for individuals aged 21 years or older. bgo33 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory component of the bgo33 account registration and KYC process.

If bgo33 identifies or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete all personal data associated with that account and, where applicable, return any funds to the originating payment source. If you believe that a minor has registered an account on bgo33, please notify us immediately at [email protected]. 21+ only — play responsibly.

12. International Data Transfers

As an offshore licensed platform serving Bangladeshi players, bgo33 may process and store personal data on servers located in jurisdictions outside Bangladesh. Where personal data is transferred internationally, bgo33 ensures that appropriate safeguards are in place, including contractual data processing agreements with receiving parties that impose equivalent data protection standards to those described in this Policy.

By registering an account and using the bgo33 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions that may have different data protection laws to those in Bangladesh. bgo 33 takes all reasonable steps to ensure that such transfers are carried out securely and in compliance with applicable data protection principles.

13. Changes to This Privacy Policy

bgo33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations or regulatory requirements. When material changes are made to this Policy, we will notify registered players by email at least 14 days before the changes take effect, and we will update the "Last Updated" date shown at the top of this page.

Your continued use of the bgo33 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting support at [email protected] before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how bgo33 protects your personal data. Archived versions of prior policies are available on request.

14. Contact Us — Data Privacy Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data bgo33 holds about you, please contact our data privacy team through any of the following channels:

When submitting a data rights request, please include your registered username, the email address associated with your account and a clear description of your request so that we can locate your records and respond efficiently. For security purposes, bgo33 may ask you to verify your identity before processing a Subject Access Request or erasure request.