dcd33 Privacy Policy — How We Handle Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how dcd33 ("we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your") who access and use the dcd33 platform available at dcd33.vip. This Policy applies to all personal data collected through the website, through your use of our services, and through any communications you have with our support team.

By registering an account with dcd33 or by using any part of our platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not create an account or use our services. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

What Personal Data We Collect

dcd33 collects personal data in a number of ways — directly from you when you register or interact with the platform, automatically as you use our services, and in some cases from third-party service providers such as payment processors and KYC verification partners. The categories of personal data we collect include the following.

How We Use Your Personal Data

dcd33 uses your personal data only for clearly defined purposes. We do not sell your personal data to third parties and we do not use your data for purposes that are incompatible with those for which it was originally collected. The specific purposes for which we process your personal data are as follows.

• To provide, maintain, and improve the dcd33 platform and all associated services, including processing your registrations, deposits, withdrawals, bets, and game play.
• To verify your identity and age in compliance with our KYC obligations, and to prevent fraudulent activity, money laundering, and underage gambling.
• To communicate with you about your account, including transaction confirmations, security alerts, support responses, and updates to our policies or terms.
• To personalise your experience on the platform, including presenting you with relevant promotions, game recommendations, and responsible gaming information based on your activity history.
• To comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, tax reporting requirements, and any lawful requests from competent authorities.

dcd33 will not use your personal data for automated decision-making that produces legal or similarly significant effects without first obtaining your explicit consent, except where such processing is required by law or is necessary for the performance of a contract between us.

Legal Basis for Processing

Where applicable data protection law requires a lawful basis for processing personal data, dcd33 relies on one or more of the following legal grounds for each processing activity.

• Contract performance: processing your personal data is necessary to create and maintain your account, process payments, and deliver the gaming and betting services you have requested.
• Legal obligation: processing is necessary for us to comply with our AML, KYC, tax, and other legal obligations as a platform operator.
• Legitimate interests: processing is necessary for our legitimate interests such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental privacy rights.
• Consent: for certain optional processing activities, such as sending you promotional communications about new games, bonuses, or seasonal offers, we rely on your explicit consent. You may withdraw your consent at any time by contacting us at [email protected].

How We Share Your Personal Data

dcd33 does not sell, rent, or trade your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose of the sharing.

• Payment processors and mobile money operators (bKash, Nagad, Rocket, Upay, and partner banks): we share transaction data with these providers solely to process your deposits and withdrawals. Each provider's own privacy policy governs how they handle that data.
• KYC and identity verification partners: we share identity documents and related data with approved verification service providers to confirm that you meet our age and eligibility requirements. These partners are contractually bound to process your data only for verification purposes.
• Game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, and PG Soft): limited technical data such as your session token is passed to game providers to launch game sessions. No personally identifiable information beyond what is technically necessary for game delivery is shared.
• Competent authorities: we may be required by law to disclose personal data to law enforcement, financial intelligence units, tax authorities, or other competent governmental bodies in Bangladesh or in other relevant jurisdictions. We will only make such disclosures where we are legally obligated to do so.

Payments and Financial Data Security

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, the payment transaction is handled directly by that payment provider using their own secure infrastructure. dcd33 receives a confirmation of the transaction and the transaction metadata, but your mobile banking PIN, bKash wallet password, or bank account credentials are never transmitted to or stored on dcd33 servers at any point.

dcd33 stores records of financial transactions associated with your account for up to 7 years from the date of the transaction in order to comply with applicable anti-money laundering record-keeping requirements. These records include transaction amounts, timestamps, payment channels, and reference numbers. They do not include your payment credentials.

Data Retention

dcd33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Our standard retention periods are as follows: account registration data and KYC documents are retained for the lifetime of the account and for a minimum of 5 years after account closure; financial transaction data is retained for 7 years from the date of each transaction; gaming and betting activity data is retained for 5 years from the date of each session; cookies and technical session data are retained for the duration of the session or for up to 13 months for persistent cookies.

When personal data is no longer needed, dcd33 will either delete it securely or anonymise it so that it can no longer be linked to any identifiable individual. You may request early deletion of your personal data at any time by contacting [email protected], subject to any overriding retention obligations that apply to us under law.

Your Rights Over Your Personal Data

Subject to applicable data protection law, you have the following rights in relation to the personal data that dcd33 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days.

• Right of access: you have the right to request a copy of the personal data that dcd33 holds about you, together with information about how that data is used.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: in certain circumstances you have the right to request that we delete your personal data, for example where the data is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
• Right to restrict processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is under dispute.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

Please note that some of the rights listed above are subject to exceptions under applicable law, and that exercising certain rights may affect our ability to provide services to you. For example, if you request erasure of data that we are legally required to retain, we will be unable to comply with the erasure request in respect of that data but we will inform you of this and of the applicable retention obligation.

Cookies and Tracking Technologies

dcd33 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, prevent fraud, and analyse platform usage. Strictly necessary cookies are required for the platform to function and cannot be disabled. Functional cookies remember your language preference and display settings. Analytical cookies help us understand which parts of the platform are used most frequently so we can prioritise improvements.

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the dcd33 platform — in particular, disabling session cookies will prevent you from remaining logged in between page loads. dcd33 does not use cookies to track your behaviour on any websites other than dcd33.vip, and we do not share cookie data with advertising networks.

Data Security

dcd33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers, one-way cryptographic hashing for stored passwords, access controls that limit which dcd33 personnel can access which categories of personal data, regular security audits and vulnerability assessments of our platform infrastructure, and industry-standard firewall and intrusion detection systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dcd33 will notify affected users as soon as reasonably practicable. If you suspect that your personal data has been compromised or that your dcd33 account has been accessed without your authorisation, please contact us immediately at [email protected].

Changes to This Policy and How to Contact Us

dcd33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make a material change to this Policy, we will update the Effective Date at the top of this page and, where the change significantly affects your rights, we will make reasonable efforts to notify you directly via your registered mobile number. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how dcd33 handles your personal data, please contact our support team at [email protected] with the subject line "Privacy Policy Query". We aim to respond to all privacy-related queries within 30 days of receipt.