ba333 Privacy Policy

1. Introduction

ba333 ("we", "us", "our") operates the online casino and sportsbook platform accessible at ba333.bio, serving players based in Bangladesh. This Privacy Policy describes how ba333 collects, processes, stores, and protects personal data in connection with the operation of that platform.

We are committed to handling your personal data with care, transparency, and respect. This policy is written in plain, accessible English so that every ba333 player — whether based in Dhaka, Chittagong, Sylhet, Khulna, or elsewhere in Bangladesh — can clearly understand how their information is handled.

This Privacy Policy forms part of the ba333 Terms & Conditions. Defined terms used here that are not separately defined carry the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

ba333 collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser, and from third-party service providers such as payment processors and KYC verification partners.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, gender, and registered mobile number.
• Contact details: Email address (if provided) and mobile number associated with your bKash, Nagad, Rocket, or Upay wallet.
• KYC documents: National Identity Card (NID) number, passport details, or driving licence details; proof of address documents where required.
• Financial data: Mobile wallet account identifiers used for deposits and withdrawals, transaction amounts, and transaction reference numbers. ba333 does not store full payment credentials; these are handled by the relevant payment provider.
• Communications: Records of messages sent to ba333 support, including the content of those messages and associated metadata (date, time, method of contact).

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, features used, games played, bets placed, session duration, and navigation patterns within the platform.
• Cookie data: Session tokens, preference settings, and anonymised analytics identifiers. See Section 6 for full cookie details.
• Location data: Country and region-level location inferred from your IP address, used for fraud prevention and to ensure compliance with market restrictions. ba333 does not collect precise GPS-level location data.

2.3 Data from Third Parties

• Payment providers: Transaction status, payment confirmation references, and wallet verification signals from bKash, Nagad, Rocket, and Upay.
• KYC partners: Identity verification outcomes and document authenticity signals from our third-party KYC verification service providers.
• Fraud prevention services: Risk signals and device fingerprint data from fraud detection partners used to protect the integrity of the ba333 platform.

3. How We Use Your Personal Data

ba333 uses the personal data described above for the following purposes:

Purpose	Data Used
Creating and managing your account	Registration data, contact details
Processing deposits and withdrawals	Financial data, mobile wallet identifiers
Identity verification (KYC)	KYC documents, registration data
Fraud prevention and security monitoring	Device data, IP address, usage data, fraud partner signals
Responsible gaming monitoring	Usage data, betting and gaming history, session data
Customer support	Communications, account data
Platform improvement and analytics	Anonymised usage data, cookie data
Legal and regulatory compliance	All categories of data as required
Sending service notifications	Mobile number, email address (if provided)

ba333 does not use your personal data to build advertising profiles or to target you with third-party marketing. Service notifications — such as transaction confirmations and account security alerts — are operational in nature and are not marketing communications.

4. Legal Basis for Processing

ba333 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create your account, process transactions, and deliver the ba333 service as described in the Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, KYC requirements, and record-keeping duties under applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your rights and interests.
• Consent: Where ba333 seeks to process your data for a purpose that is not covered by the above grounds (for example, optional marketing communications), we will request your explicit consent and you may withdraw that consent at any time.

5. Data Sharing and Disclosure

ba333 does not sell, rent, lease, or trade your personal data to third parties. Data is shared only in the following limited circumstances:

5.1 Service Providers

ba333 engages third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Payment processing partners (bKash, Nagad, Rocket, Upay) — to execute deposits and withdrawals.
• KYC and identity verification providers — to verify the identity and age of players.
• Fraud detection and risk management providers — to identify and prevent fraudulent activity on the platform.
• Cloud hosting and infrastructure providers — to store and serve platform data securely.

All service providers are contractually required to process data only for the specific purposes for which it is shared and to maintain appropriate security standards.

5.2 Legal Disclosure

ba333 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law or in response to a valid legal process. In such cases, ba333 will disclose only the minimum data required to comply with the relevant legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of ba333's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6. Cookies and Tracking Technologies

ba333 uses cookies and similar technologies to operate and improve the platform. The table below summarises the categories of cookies used:

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login state, CSRF protection, load balancing	No — platform will not function without these
Functional	Remembering your language preference, game display settings, and responsible gaming tool configurations	Yes — platform remains usable but preferences will not persist
Analytics	Aggregate, anonymised data on page views, feature usage, and session duration — used to improve the platform	Yes — no impact on platform functionality

ba333 does not use advertising cookies, retargeting pixels, or any cross-site tracking technology that follows you across other websites. You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the ba333 platform from functioning correctly.

7. Data Security

ba333 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ba333 servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate business need.
• Regular security assessments and penetration testing of the ba333 platform.
• Automatic session timeouts after periods of inactivity.
• Two-factor authentication (2FA) available for player accounts via OTP sent to your registered mobile number.

While ba333 applies industry-standard security practices, no platform can guarantee absolute security. Players are reminded to use a strong, unique password for their ba333 account and to contact support immediately if they suspect any unauthorised access.

8. Data Retention

ba333 retains personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the account's active status plus five (5) years following account closure, to meet AML record-keeping obligations.
• KYC documents: Retained for five (5) years following account closure or the completion of the relevant verification process.
• Transaction records: Retained for five (5) years following the date of the transaction.
• Support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Analytics data: Stored in anonymised, aggregated form indefinitely. Anonymised data cannot be used to identify you.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with ba333's data deletion procedures.

9. Your Data Rights

As a ba333 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact ba333 support at [email protected]. ba333 will respond to all valid requests within 30 calendar days.

Please note that some rights are subject to conditions and limitations. For example, ba333 cannot delete data that must be retained by law (such as AML records). Where a request cannot be fulfilled in full, ba333 will explain the reason in writing.

10. Children and Minors

The ba333 platform is strictly intended for adults aged 18 and above. ba333 does not knowingly collect personal data from individuals under the age of 18. If ba333 discovers or is notified that an account has been registered by a minor, that account will be closed immediately and all associated data will be deleted, subject to any mandatory legal retention requirements.

If you believe that a minor has registered a ba333 account, please contact us immediately at [email protected].

11. Third-Party Links

The ba333 platform does not contain links to third-party websites. This Privacy Policy applies solely to personal data collected and processed by ba333 in connection with the operation of the ba333 platform at ba333.bio. ba333 is not responsible for the privacy practices of any third-party service providers, whose own privacy policies govern the handling of data by those parties.

12. Changes to This Privacy Policy

ba333 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via a notification on the platform or to the mobile number registered on the account, with a minimum of seven (7) days' notice before the changes take effect.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of this Privacy Policy came into effect. Continued use of the ba333 platform following the effective date of any revision constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ba333's handling of your personal data, please contact the ba333 data support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" in the subject of your message for faster routing.
• Availability: 24 hours a day, 7 days a week
• Response Time: Within 30 calendar days for data rights requests; typically within 2 hours for general privacy queries

You may also review the ba333 Terms & Conditions and Responsible Gaming page for related policies governing your use of the platform.