ed33 Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") describes how ed33 ("ed33", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the ed33 online betting and casino platform at ed33.io and any associated mobile interfaces, applications, and services.

ed33 is committed to safeguarding the privacy of every player on its platform. This Policy is written in plain English so that you can clearly understand our data practices without needing a legal background. By registering an account on ed33 or by continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy is incorporated by reference into the ed33 Terms & Conditions and should be read alongside them. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Data We Collect

ed33 collects two broad categories of personal data: information you provide directly to us, and information collected automatically when you use our platform. The specific data points within each category are detailed below.

2.1 Information You Provide Directly

When you register an account, complete KYC verification, make transactions, or contact our support team, you may provide us with the following personal data:

2.2 Information Collected Automatically

When you access and use the ed33 platform, our systems automatically record certain technical and behavioural data:

• Device Data: Device type, operating system, browser type and version, screen resolution, device language settings.
• Network Data: IP address, internet service provider, approximate geographic location (country and city level).
• Usage Data: Pages visited, time spent on each page, features used, games played, betting history, session timestamps, click patterns and navigation paths.
• Transaction Data: Deposit amounts, withdrawal requests, bonus claims, bet amounts, game outcomes — all denominated in Bangladeshi Taka (৳).
• Cookie Data: Session cookies, preference cookies, and performance cookies as described in Section 7 of this Policy.

3. How We Collect Data

ed33 collects your personal data through the following means:

• Direct interactions: Data you submit through account registration forms, KYC document uploads, deposit/withdrawal requests, live chat, email, and any other direct communication with ed33.
• Automated technologies: Cookies, web beacons, server logs, and similar technologies that record your interactions with the ed33 platform automatically as you browse and play.
• Payment service providers: Financial transaction data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you conduct deposits or withdrawals through those channels.
• Identity verification services: Data received from third-party KYC and age verification providers engaged by ed33 to confirm the identity and eligibility of players.
• Fraud detection services: Risk signals and fraud indicators received from third-party anti-fraud systems that ed33 uses to detect and prevent illegal activity on the platform.
• Game providers: Game session and outcome data received from certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

4. Why We Use Your Data

ed33 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account creation and management: To register your player account, verify your identity, manage your profile, and provide access to all ed33 services.
• Age and eligibility verification: To confirm that you are at least 21 years of age and legally permitted to use our platform. This is a mandatory compliance obligation.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions in BDT.
• Service delivery: To provide sports betting markets, casino games, live dealer tables, slot games, and all other features of the ed33 platform that you choose to use.
• Customer support: To respond to your queries, complaints, and support requests through our 24/7 English and Bengali support team.
• Responsible gaming compliance: To monitor gaming behaviour for signs of problem gambling, apply player-requested limits, and fulfil our self-exclusion obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, match-fixing, and other prohibited activities on the platform.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) regulations.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features and improvements to the ed33 platform.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and sports betting alerts — but only where you have explicitly opted in to receive such communications.
• Personalisation: To tailor your ed33 experience, including displaying relevant games, offers, and cricket or sports content aligned with your stated preferences and location within Bangladesh.

5. Legal Basis for Processing

ed33 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have agreed to — including account management, game provision, and transaction processing.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, age verification obligations, and any requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of ed33's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, and product analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — particularly in relation to marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

ed33 does not sell, rent, or trade your personal data to any third party. However, we may share your data with the following categories of trusted service providers and partners where strictly necessary to deliver our services or meet our legal obligations:

6.1 Service Providers

ed33 engages third-party service providers to assist with platform operations. These include KYC and identity verification providers, payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), cloud hosting and infrastructure providers, customer support tooling providers, and fraud detection service providers. All service providers are bound by strict data processing agreements and are permitted to use your data only for the specific purpose for which it was shared.

6.2 Game Studios

Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited player session data necessary to deliver their games on the ed33 platform (such as session tokens and wagering amounts). These studios do not receive your full personal profile and are contractually prohibited from using this data for any purpose other than game delivery.

6.3 Legal and Regulatory Disclosures

ed33 may disclose your personal data to government bodies, law enforcement agencies, financial intelligence units, or regulators where required to do so by applicable law, court order, or regulatory instruction. Such disclosures are made only to the extent required and are not within ed33's discretion to withhold.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ed33's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is processed as a result.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by the ed33 platform when you visit. They allow the platform to recognise your device on subsequent visits, remember your preferences, keep your session active, and collect analytical data about how you use the site.

7.2 Types of Cookies We Use

7.3 Cookie Control

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair the core functionality of the ed33 platform — including the ability to log in and maintain a session. Performance cookies may be disabled without affecting core functionality.

8. Data Retention

ed33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, in line with standard financial record-keeping obligations.
• Transaction records: Financial transaction records including deposit and withdrawal history are retained for a minimum of 7 years from the date of the transaction.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of the most recent transaction or account closure, whichever is later.
• Support communications: Customer support chat logs and email correspondence are retained for 3 years from the date of the interaction.
• Marketing consent records: Records of marketing opt-ins and opt-outs are retained for the lifetime of the player account plus 3 years.
• Anonymised analytics data: Aggregated, anonymised usage analytics that cannot be linked back to an individual player may be retained indefinitely.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. ed33 conducts regular data audits to ensure that data not subject to a retention obligation is promptly removed from active systems.

9. Data Security

ed33 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ed33 platform.
• AES-256 encryption at rest for all sensitive data stored in our databases, including KYC documents and financial records.
• Role-based access controls (RBAC) that limit access to personal data to only those staff members who require it to perform their job functions.
• Multi-factor authentication (MFA) for all internal systems that store or process player personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection and monitoring systems that identify and respond to anomalous access patterns in real time.
• Incident response procedures that ensure prompt investigation and, where legally required, timely notification of any data breach.

10. Your Privacy Rights

As a player on the ed33 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

Please note that some rights are subject to conditions and limitations under applicable law. For example, the right to erasure does not override our legal obligation to retain financial transaction records for the minimum period required by AML regulations. Where a request cannot be fulfilled in full, we will explain the reasons clearly and tell you what we are able to do instead.

11. Children's Privacy

The ed33 platform is strictly intended for adults aged 21 and above. ed33 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If we become aware that personal data from a person under the age of 21 has been collected, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and have reason to believe that a minor in your care has provided personal data to ed33 or registered an account on our platform, please contact us immediately at [email protected] so that we can take prompt corrective action.

12. Third-Party Links & Services

The ed33 platform may contain references to or integrations with third-party services, including certified game studios and payment processing partners. While ed33 exercises due diligence in selecting its service partners, we are not responsible for the privacy practices of any third party. This Privacy Policy applies solely to data processed by ed33 directly. We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with the ed33 platform.

In particular, when you conduct a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the relevant mobile financial service provider will also process your transaction data in accordance with their own privacy policies and the regulations applicable to those services in Bangladesh.

13. Changes to This Privacy Policy

ed33 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players via email to the address on file and/or via a prominent notice on the ed33 platform. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how ed33 is protecting your data. Continued use of the ed33 platform following the notification of any material change constitutes your acceptance of the updated Policy. If you do not agree with any changes to this Policy, you may request account closure at any time by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ed33 processes your personal data, please do not hesitate to contact our dedicated Privacy team:

• Email: [email protected]
• Support Language: English and Bengali
• Response Time: Within 24 hours for urgent matters; within 30 days for formal data subject requests
• Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

For formal data subject access requests (DSARs), please email [email protected] with the subject line "Data Subject Access Request" along with your registered email address and a copy of a valid government-issued ID for identity verification purposes. We will acknowledge your request within 5 business days and provide a full response within 30 days.