Privacy Policy — bad333 Online Casino

Effective Date: 1 January 2026

1. Who We Are

This Privacy Policy applies to the bad333 platform, accessible at bad333.vip ("the Platform"). bad333 operates as an online casino and sports betting platform serving adult players across Bangladesh, including users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. When we refer to "bad333", "we", "us", or "our" in this document, we mean the operator of the bad333 Platform. When we refer to "you" or "your", we mean any individual who visits, registers on, or uses the bad333 Platform.

For any privacy-related queries, you may contact our Data Support team by email. Our contact email is stated at the end of this policy. We will respond to all privacy enquiries within two (2) business hours during Bangladesh Standard Time (BST, UTC+6).

2. What Personal Data We Collect

bad333 collects personal data in the following categories, depending on how you interact with the Platform:

• Registration data: Full legal name, date of birth, email address, mobile number, and residential address provided when you create your bad333 account.
• Identity verification data: Copies of government-issued identity documents (national ID card or passport) and proof of address, submitted during the Know Your Customer (KYC) verification process.
• Financial data: Mobile financial service account details (such as your bKash, Nagad, Rocket, or Upay number) and card details (Visa or Mastercard) used to process deposits and withdrawals. bad333 does not store full card numbers; payment processing is handled by certified payment partners.
• Transaction data: Records of all deposits, withdrawals, bonuses claimed, bets placed, games played, and associated amounts in Bangladeshi Taka (BDT).
• Technical data: IP address, device type, operating system, browser type and version, session timestamps, and cookies or similar tracking technologies that record how you interact with the Platform.
• Communications data: The content of messages you send to bad333 support, including any attachments, and records of responses provided to you.
• Responsible gaming data: Any deposit limits, self-exclusion elections, or cooling-off periods you apply to your account, held to ensure your settings are respected.

bad333 does not knowingly collect data from individuals under the age of 21. If we become aware that an account has been registered by a person under the age of 21, the account will be closed immediately and any real-money balance returned to the originating payment method.

3. How We Use Your Data

bad333 processes your personal data for the following lawful purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account preferences and history.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your nominated account.
• Identity and age verification: To confirm that you meet the 21+ age requirement and that your identity matches the registration details provided, in accordance with our anti-fraud and responsible gaming obligations.
• Legal and regulatory compliance: To meet any applicable anti-money laundering (AML) obligations, to retain transaction records as required by law, and to respond to lawful requests from competent authorities.
• Platform security: To detect, investigate, and prevent fraudulent activity, bonus abuse, account takeovers, and other prohibited conduct described in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions for quality assurance purposes.
• Responsible gaming: To honour the deposit limits, session restrictions, cooling-off periods, and self-exclusion elections you set on your account.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game selection, and user experience. This analysis does not identify individual users.
• Promotional communications: To send you relevant offers, game updates, and promotional information about bad333 where you have consented to receive such communications. You may opt out at any time by contacting support.

4. Legal Basis for Processing

bad333 relies on the following legal bases for processing your personal data:

• Contract performance: Processing that is necessary to fulfil the Terms & Conditions you entered into when creating your bad333 account (e.g., processing payments, managing your account).
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and identity verification requirements.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, and improvement of our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for promotional communications, where your freely given consent has been obtained and can be withdrawn at any time.

5. Cookies and Tracking Technologies

The bad333 Platform uses cookies and similar tracking technologies to improve your experience, maintain your session, and gather anonymised analytics. The types of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game filter selections to personalise your experience.
• Analytics cookies: Collect anonymised data about how visitors use the Platform (pages visited, session duration, error reports). This data does not identify individual users and is used solely to improve Platform performance.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of some Platform features. By continuing to use the bad333 Platform, you consent to the use of strictly necessary cookies.

6. Sharing Your Data with Third Parties

bad333 does not sell or rent your personal data to third parties. We may share your data with the following categories of trusted partners, strictly for the purposes described in this policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners (Visa, Mastercard) receive the minimum payment data necessary to authorise and complete your transactions.
• Identity verification providers: Third-party KYC service providers who assist bad333 in verifying the identity and age of new users. These providers operate under strict data processing agreements.
• Game studios: Certified game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your full personal profile.
• Legal and regulatory authorities: bad333 may disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law or a valid legal order.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure partners who process data on bad333's behalf under strict confidentiality agreements.

All third-party partners who process personal data on behalf of bad333 are bound by data processing agreements that prohibit them from using your data for any purpose other than the services they provide to bad333.

7. Data Retention

bad333 retains personal data for the following periods:

• Active account data: Retained for the duration of your account relationship with bad333 plus a period of five (5) years following account closure, to satisfy legal and regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Support communications: Retained for two (2) years from the date of the most recent interaction.
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

8. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bad333:

• Right of access: You may request a copy of the personal data bad333 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bad333's legal retention obligations.
• Right to restrict processing: You may request that bad333 limit the way in which it uses your data in certain circumstances.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including the receipt of promotional communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact bad333 support at [email protected]. We will acknowledge your request within one (1) business day and aim to resolve it within fourteen (14) calendar days. We may request proof of identity before acting on any rights request.

9. Data Security

bad333 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive personal data at rest, strict access controls limiting data access to authorised personnel only, routine security assessments and penetration testing, and multi-factor authentication on internal administrative systems.

While bad333 takes every reasonable precaution to safeguard your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your privacy rights, bad333 will notify affected users as promptly as is practicable.

10. Children and Underage Users

The bad333 Platform is strictly for adults aged 21 and above. bad333 does not knowingly collect or process the personal data of individuals under the age of 21. If you believe that a minor has created an account on the bad333 Platform, please contact [email protected] immediately. Upon confirmation, the account will be closed and any real-money balance returned to the originating payment method. Personal data associated with the minor's account will be securely deleted.

11. Changes to This Privacy Policy

bad333 reserves the right to update or modify this Privacy Policy at any time. Where changes are material, bad333 will notify registered users via the Platform or by email to the address associated with your account. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision. Continued use of the Platform following notification of changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bad333 handles your personal data, please reach out to our support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 2 hours (Bangladesh Standard Time, BST, UTC+6)
• Availability: 24 hours a day, 7 days a week

This Privacy Policy was last updated on 1 January 2026. All previous versions of this document are superseded and have no further effect.